0, 0x0}) [ 1238.223215][ T2206] sp0: Synchronizing with TNC 23:37:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffff8c4b, 0x200) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf9e935098295c64}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x8c, 0x20, 0x100, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x3, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0xa5b3f431f356f4bb}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3d5cc0}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @multicast2}}]}, 0x8c}}, 0x40) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x4000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x20040, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x7ff, 0xfffffffffffffff7}) 23:37:41 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) accept$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffeff, 0x101200) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 23:37:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x894c, &(0x7f0000000000)=0xffffffe9) [ 1238.639624][ T2221] debugfs: File '2220' in directory 'proc' already present! [ 1238.752793][ T2234] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1238.796394][ T2224] ref_ctr_offset mismatch. inode: 0x4278 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1238.844506][ T2238] debugfs: File '2220' in directory 'proc' already present! 23:37:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c5342, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1239.004810][ T2234] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1239.190710][ T2245] sp0: Synchronizing with TNC [ 1239.202212][ T2243] sp1: Synchronizing with TNC [ 1239.300144][ T2257] binder: 2253:2257 ioctl 402c5342 20000080 returned -22 [ 1239.379229][ T2245] sp0: Synchronizing with TNC 23:37:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000000c0)={0x9, 0xffff, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:37:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000002c0)={0x0, 0x800, 0xaac39e73ded7ce77, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x8}) sendmsg$nl_crypto(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28010000130004002abd7000fcdbdf2567636d2d6165732d6365000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000001ffff8000000000000000008000100ffffffff08000100830200000800010007000000080001000001000008000100c20300000800010000000000080001005500000008000100050000000800010009000000"], 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) [ 1239.453252][ T2265] binder: 2253:2265 ioctl 402c5342 20000080 returned -22 23:37:42 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:37:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xae01, &(0x7f0000000000)=0xffffffe9) 23:37:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:37:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40345410, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1239.864743][ T2287] debugfs: File '2284' in directory 'proc' already present! [ 1240.011231][ T2300] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1240.057128][ T2301] ref_ctr_offset mismatch. inode: 0x4278 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1240.316216][ T2294] ref_ctr_offset mismatch. inode: 0x4278 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1240.319869][ T2300] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1240.334844][ T2310] binder: 2309:2310 ioctl 40345410 20000080 returned -22 23:37:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xbc, 0x10000) connect$netrom(r1, &(0x7f00000000c0)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}, {0x2d, 'memory'}, {0x2b, 'pids'}, {0x2b, 'io'}, {0x2b, 'pids'}, {0x2b, 'cpu'}, {0x2d, 'io'}, {0x2b, 'pids'}]}, 0x2c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:37:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000180)={0xfffffffffffff9e6, {{0xa, 0x4e23, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e24, 0x9, @loopback, 0x1c4}}}, 0x108) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x10000) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000300)={0x0, @reserved}) [ 1240.531114][ T2310] binder: BINDER_SET_CONTEXT_MGR already set [ 1240.616508][ T2302] sp0: Synchronizing with TNC [ 1240.618536][ T2300] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:37:43 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1240.677895][ T2310] binder: 2309:2310 ioctl 40046207 0 returned -16 [ 1240.768950][ T2300] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:37:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4138ae84, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:43 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@multicast1, @multicast1, 0x0}, &(0x7f00000001c0)=0xc) recvfrom$packet(r0, &(0x7f0000000100), 0x0, 0x40000000, &(0x7f0000000200)={0x11, 0xf7, r1, 0x1, 0x7, 0x6, @remote}, 0x14) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x642840) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xc8, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@flat=@handle={0x73682a85, 0xc5eff3474f94f652, 0x2}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1100, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x2ee4cb36320c10ab}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x4, 0x1, 0x22}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x2f}}, &(0x7f0000000500)={0x0, 0x20, 0x38}}, 0x40}, @exit_looper, @release={0x40046306, 0x3}, @register_looper, @request_death={0x400c630e, 0x3}, @enter_looper, @release, @enter_looper], 0x21, 0x0, &(0x7f0000000640)="fe212db6d4ae6b858f82accf5c425e463820fbe89d50405e1123072c87b8e0c174"}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x80) r3 = socket$kcm(0x10, 0x6, 0x10) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000100)={0x2, 0x1, [0xffffffff, 0xab, 0x83a, 0x5, 0x1, 0x8, 0x40, 0x3]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) chown(&(0x7f0000000240)='./file0\x00', r4, r5) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x18}]}, 0x0) [ 1241.058251][ T2302] sp0: Synchronizing with TNC [ 1241.195187][ T2333] ref_ctr_offset mismatch. inode: 0x4111 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:37:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'pids'}, {0x2d, 'cpu'}]}, 0xffffffffffffff85) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000100)={0x7, 0x4}) 23:37:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x400454ca, &(0x7f0000000000)=0xffffffe9) 23:37:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000140)={0xffff, [0x6, 0xfff, 0x8, 0x1, 0x5, 0x6, 0x7, 0x3ca9e433, 0x48c2, 0x1, 0x4a, 0x1, 0x97, 0x100000001, 0x4, 0x60, 0xfff, 0x259f, 0x2, 0x81, 0x9a5f, 0x1, 0x5, 0xfffffffffffffffb, 0x9, 0x100, 0x1, 0x8, 0x7, 0x1f, 0x101, 0x6, 0x20, 0x2000000, 0x100000001, 0x1, 0x1, 0x8, 0x3, 0xfff, 0x2, 0x100, 0x5, 0x6, 0x5, 0x80, 0x5, 0x7], 0x2}) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000001000/0x4000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/97) rt_sigreturn() [ 1241.500911][ T2353] binder: 2351:2353 ioctl 4138ae84 20000080 returned -22 23:37:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1241.709618][ T2371] debugfs: File '2370' in directory 'proc' already present! [ 1241.953518][ T2371] binder: 2370:2371 ioctl 5429 20000180 returned -22 [ 1242.003588][ T2361] binder: 2351:2361 ioctl 4138ae84 20000080 returned -22 [ 1242.115743][ T2385] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:37:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x400, 0x2, 0x999862a099097352}) 23:37:44 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1242.273631][ T2385] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:37:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x800454d2, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x400454d9, &(0x7f0000000000)=0xffffffe9) 23:37:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x800}, &(0x7f00000001c0)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:37:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400, 0x0) sendmmsg$unix(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000d80)="2d29d42be6a7570ebdcf05f33a2b8b893163b6d362bb68fbdcd3f9ad1cfe2a2a91ddd320ae7a4c2c6e40aa519f12e0d1e6087e3bad93adf69f725845f40863c352312731ffc52c0f3b7a73115e8859700e9069ed7734283de80abf4b24221771d0bd6b770bd1fc0ee935051f6c79fc944df43577bdca628f20ed97419fe73fe3a14bd023944540e57d8f121cba73e6b1473ad872b471ebd0b8098e67b4681b0dba11eede0f4b798bd84f6478912e56b6fa315f898d4918e44be73e6e4896333f3106a044bb6f820cbe651bbf1f3be7493b0b77e0b5f56d586ab3c0d90850e16a86ed35969e12fbc4ef34320d3e8ed8b82fb371c1cc08855793cf7b32d8c85e8a45cd79448475c6a96bf6797f703ffd6414c7d419cf78bfbe7e726ab74ef986110f69ac02228c25622ac72370b5f335bd9e9a0ff4f994197c772fe04d9400e4eb8b8f4870d639b5ed41034a521c62ffa18c1d382746156231d71aadbbb165c6b528bca6e06ec81ee29a17e4a34c47e839ac29d254ec77441a87675320e6f7a6ece9d9cdf74dee129d7e1e41b09f7aa442d28723bbaa88ec0dbe3a4f341adca09d85f6a55d02361eba2cfb67d5a0d56404aa0b524df03352a513913026ed310d887512bda1d85518fe1748ad20cb0a6d6dfd3ab7fea60b8760925ba64e30538fbfcde82565da13959cc30b3cf05aafcd6d01b696825f32811e532f7d6c811847ba330e2ab3898a6c41b592a3d5d73a87b717dc3ceab8dd0825166ab71fcbff1040a1d427a9acf6c4742117ccb7bc308bcfd75bf4233f40ada92482365c6c499cf70b2f3b8936611e940b2c63d9279f6959b2f92b8db6d1a7c9ef49ef430af10b2dcb60481fcf9d241f01dc0de7e73deef718df8f099cd7c4fab693c501a276727a16804a80cf39a4b25b32b8f332c6c88df467157b8bfae4b20fd76435b8023df774f9b82281d7982788324cadbc744caf2defe31d922a7406c5eb468bf7b74634c216825d1fed423cdb18b09d9fe9c65b7caa897b6c3be439ecaf894d080bee0fb9ce5e4c44e7f004efa47861c11704d7faa55bd9d6c5e34ea55172f05976bc887ef095a6cdd9bd5a6eb7a70f9ad7ce41ec9298b7fca16eb729f401eb6b0b79b9beb720f75a3beac78b322ad75bb3494b4c19b4dd9e1a4f2f27e1f0d5079d9a12bc0cf293353a059cde578f75eb4502ccaa7df10791bbb9b164865e3ba2852aae262c3eb0037d7a12bf69c86082085620f49f7a18978f5ca2926b935ce16d4efe61c4e2b296c239eec1d9047bf4d734101525744314e8b61be13b7f4df316b2541c3dd7ecb440e726b55a298098b8a3ca15ad20ff37e4086f4235edfe138229756bd4d052e5b00d0e1ea98f92d2dff0f25e946b6fd56307c9a32e38979446d5af354aa2d66a7fd963572d5f28c7ad4ec096dc8a08d531f4af3f3ed8933d62b48acd9f035d0ff57f0f490d2613c6be7b6793d13d85d9207ed1eb9fde9441a7604453a933710d14a085ffd615ccf6d87877f376b6c702e19b7c2332805b2aea721634717e8ff034b7123a64d24b84d50b9cc8538f51c5b75958cb5cc3118d320035dbd5307b92fefc6e44085b3676293d418a6217f68e0ca3917d778994609348f7f51c48270f5b037db95e22508d6c3c265a56e821f2436b5e70f73670c591cf403f50aeaaa5337dc1484514a6ec5d6f644e48cb8ebd5c0ad770a59e3372a4e56f2b5dccf09c5b04094c501dd43b027a4255fbdd6c2aa9abc4a2e4aa3109445a0673a9153aa97a1563fb5b216b5d5dd3c9174bc62dd14e31e93abb63172b05a5c2b94fff0be06d597de18cec95078a11e27ab1bd958883fc44fb8f981eca0cf33d7e162f5c721b5c59e99c3c7d7e0703ddeedc24a0acf24d8d3488231dd8e4e8324652c2fbaef3e68a219c9342722fc16cbc8f4a5554d3825d64ad552cc1415d8a8c5df95d2a8312c810736c5ee85c73ecc8738d2c1d00b5256346f3c741f0e3fbf9ab5a713178d32ec3a84fe447a9de9411aaf9e7425e8b2b5fa9342aee287ff9334ce91e5cf8e04ab6006c22b6c75e79bd315840665ee5e247a781b62c170b96918cf8ce0c386fca413905213bc8c4d90ea676647ff9fd9675e0adfe428a00dc0737ad742e64976c9ea65f9f093e546f2ce7ec29225f95f79e7ba815820fb1f006ef377a6eb975e743643cfccfcfd0ba6fda4e37f0e9dd9cb3cf8aff1831007db74a04a24595921aed8a226bfebaff52d1e98504bf7ae5ff882233d0c453b7392791b38f1f8555a5bb94b1ebcb26a47e0ed05a972ca3a326c9f92fd0a426b98e0cbfec5a4ad4e3cb6a8bc01bea3ca9f15bcae3d37da954fe67ee08ae0649a0c796fce59a40bd86b5fc7813eaa0ba68d771b0735d53cdf4f76044037acebac012068f39ea1cf970c58f32f5b8fff9c4474cc29daed6b550aca77a11fa55b7fd394fedacea3e62cd29eaa3ddf7e0695896f8a88386dbafc9ed42cbcd65b484bfb9f657cd85c08277b7f598303b6b7eb05b33ef59a0b79ac20864d4172431d87e94c0da92925d9f20de3db3229572f274ff39d27df5d77991e58ce298aea1b53efb183ccaeb92f4f329edd0a3c5019373557895b72e4cf05935fe98bc2cb058c172fbe6242e7ed5dde15aaa8d912e971dce84edbf85dd516e90611eacdcf170e95ecd0ddc3b05862184b2b68f375ab6093340c95474de4719de5b03a98a27de7927078a2655efd9033e9ba46c86b509268fa4bb9c918c8e4bbb3e1f95ebce88ecae2934ab22513a581693f38675a98f267ca150e58dbd9f57d573e45eb6f95d8350a54620c831e87e611f14d8fa56c8a3c5addc19c9ebf4883070de6b1ee8c4655242531ab5ffaedd8d9591af150f9219d163f03f10e34baed66029c21f63ea78e3a71c0db59897e57908d1f6cdec8f523cc6191bf9f042816885be6a4eac7e88058c31a08a2d4644d31f9203d476658e4ca18ea04ae4908a680a9acee54f026f7b8d2609e692e35df7db5e37c66a05c8ed5ae810468e14cd7c5c03bf10a1df8824bdbc682e3e5338b2f49e1b7cabc12a59381b44cc24e222d5533cb6a7695b34c07e446c9a0a716107697e6ea74527314b118d8fe6d0d4d98c60ce7530da6c434d20574abc17e234064ff00b60127206fb7f84cbd8c6f460220fc2c42b9c631e333b8eab3062a16bc160330049f3a24edf1a88199d7286e7e54f28c2de43f79039c192765a8771a984a883c80bd9509bd702b5b06d82f3a53ed1980b7ecfcfa51f619dda5b0a54113e0855e2c2182732c5a645cae36be8438df319cc4c84e9c8a12a7204595bbe6c6c0c62b64bb8051580ae0fb87b39f733869eecf7b758361f85a46f1460cd5b4780013ad53964ff5ea26ae6c6c08055ebc2ccf382689ee99a88c8ed7b6de6aef20a2f7f99320216dfc1f63bb140a7cf39c4948c4cbc31e9bc43950307d7c1170c0fa5f701b83addb0ad553573b88a63a6609f26aa1f0007992c3235bc0ebcaeb53436ee60a3c8f73ac73be0dc280d86729525fbccfcd1fbd1d4095cbfd15fe77912d89ffa1fe1a5965ffd8f038a777b80c6c40abe27276dca556941de087776c48289bcaf77e8698634f45e2403e9d22ce8a43e6e9693c5fec40baed702a7da093832580eb50ef54b4770462b98fa612a8422670cdb1f9c77d70bc60dfccce94963a1cc13221428af757e433cef4ee4efdc4a77819e0f1e5757d4c8c4b72a1784c9184d01064a71088376e37ff8ab7b32a8a9c3593924dde305bf779c5e5866cef494c3c16ff7f12660a2e4e66bb0681777c899cd45b18a1c6bf397c5df87eba258579860c322c0365ed1364eeb684b8016aa74dd51bbaa583ed35e1b059ce85b82bed6ec1525c8f5f415427b4a23892a1237f6fe0182501cf884a40e1b7b45396633407778befb5409f04e29e4b381bccc4f8f46637a156515a469290dfbd882e94433b2044e58b8dbe3f827afdd51022551ffec89e42bb7a78c3f1a3be51dd87bd8b09f80099ac07e48d7879df607fc19fbf683aa182d2986d51b768d3965228bb823b0ff7e6e7b916025648082b3cf998c64ab5619a4627107f59ec360f769975f12825aeeaaf5590d853546abd055566124ccd0d6ef916921503f894dbdb93bfe8b86726056a2894a8a5b07479cf3c20d600f4659c09350d3a63e422a1cd423da7fe4864ac60bca7aab13ffd6bb7241454e4fb9fa4245dacde5961b46b0cc815180ae4251194dc224991f9c5a88ab2775413e8bfebf50bee190b062f915945991d02900186112123435e4b5ebb50acef380fca8627a3ee90df726eafbc09162c4514781412bc2ba4b1722b471a2392110ef53b20ce885eb119f07e45d93853813b2a2b5811ff3f287696727c257b2fd77a4ac707bda6fcada08a8e6856f1ad5b9f6166550af8c2616d8a6ee09b92ce795774ad86c49c3e5d23f2edcf6473658553bdc93c0a0d957cf2bf988968de00dd6cea81620ed6f0008e587dd20b50987af70d9dac6213601af4ce939ea7741dca20b67a60fd72eae4f588627f09000958e2182246e083511940f968c2619f91e9b5b1df3a4a21ddf923e633d165b848a8e4655992b02c6bbbe4dde429779597545abb9d21f341f0c3ac1f87703297c3feb37b0367c2520f3a2c7fc61ca108d5df35f16da8b34cd05aaf9156ba18e0d616653441f6898d9101f5be28e367cd73cd7a1a3022b99699619671dbe9dcc25f7f8fc04787a01dc9b2d8dea2a6e87a6bd2f12b425069d1777979584e26dfbbee63eee1d6a6cd0e45f1803ec5c67423c6a64ff59907bb5c4319040e5a2c78ba3711b477c99312525a7defaee0b2df86c875842c4c0bf77476596e967dea56f09b8bd754eb2b1e16bb7d88f827ee51dcf057e321af207f0a80c1d26da229f0d02faff520ae6148b698ed3b3d909dbbf2a8cf939789cc9d1793d0732d3f7848fb159301eb50c9e99fc2b64c8840e0e6cb2e6af5b172c89bc6be70cfdd62bff51b45700cb1e1929c1bd699695c83f13f7eb8a9ffa7d0af60f75f399e10a277e9e3468dcd7e660a096fe47b0bdf9eb2713cf53b0b60d3e61ae73a7f6b677293f02fd29bc85e3f41c795c8e2f3803784748f49a3937870338cbc0be2cdeefe34002e1378e5813cc8718b04bad7c4a6f9877cab1673b977fe5abbaf1563eede81df9a401bbab819bbc3e700f48b2f5564400adb4616efa8882b6103646e5df4c9eb3318039faf746dfb26acecefd112a36586d805d6ae5ca8c20ab46c0817508ee00f288fb94986aa19416bee5c314e3dcccf597724a2b772fd8703cce018fcf5011187fc7d6cd383ca228486900ba6984649d8727d934d5f90d9a0410eca6a5c417f361568835de4dc0bd1b33f537c1a2412d566268722ef1576f0dc21dbdb8d0138c79ac221eec122c2109032f6d304077bccfc3f9cb8a03be75918514fb0f47ab9e5e99064f3840276a32f4d4f80ea2987742d5765803293b86964f27af07a1c487dfd2e96d042858be63852940b9f4ce5fd497a4329e00541d5a45c2e8ecfda5d83005ab5a0018bebbda4d39cd2464f4357ba25eaead3426d489766571922369f7a5b065e7748a5f523ec3300f4dd344706092ed1ffde3f72a016353e07e25f53fab6f7ad5519b717fc349acdddd4a2a6a56885525132066c5a7ffcb65db6e803e10dfeee45c9d557f4f37bd0dbdc8bd9970c28c968caf8407bf32d1de60d88d1c5bfd768be6b665c57393936a8bc2931d7294717b3dcef5cdda410d18d7cea43c2da96d4e86b95ae642c09b279878faa086b324bee8bd8c6928", 0x1000}, {&(0x7f0000000200)="f1c0f2d0eded79066a24ffe9da5a0a22097bf9914db9b132d9f4ac0e7630cbfff85f56f0780e", 0x26}], 0x2, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x38, 0x1}], 0x1, 0x8000) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) accept4$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x800) [ 1242.657112][ T2393] ref_ctr_offset mismatch. inode: 0x4211 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1242.816339][ T2403] binder: 2399:2403 ioctl 800454d2 20000080 returned -22 [ 1242.841827][ T2402] sp0: Synchronizing with TNC 23:37:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x200000) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x6, 0x4, 0x100000000, 0x52a, 0x7c0000000000, 0x6ec}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) syz_open_pts(r0, 0x1) [ 1242.980577][ T2408] debugfs: File '2404' in directory 'proc' already present! [ 1242.990576][ T2409] binder: 2399:2409 ioctl 800454d2 20000080 returned -22 [ 1243.030897][ T2410] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1243.186363][ T2410] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:37:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:45 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1243.363552][ T2410] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:37:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x400454e2, &(0x7f0000000000)=0xffffffe9) 23:37:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000480)=[@clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/94, 0x5e, 0x1, 0x2d}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x1040}, @release, @free_buffer={0x40086303, r2}, @release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/143, 0x8f, 0x1, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/169, 0xa9, 0x0, 0x3b}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x400}], 0x8b, 0x0, &(0x7f0000000580)="ea61916cb5ab43d02f984c226fc84ef93de24597c11bb93a15c80c9dcae911cdd09c7121c27485d7937d346f5c9804d6849806abd1a082926e81e7aefddfb24c27c35066e95bf4a48ac49b55fc9bcca6dde319ac46b111a6bb5c253ea32b86f0e847875feb91dc12d3f38fc55229bf9f8e0a7f4f9b97bffe99d5c8b9e69dc316c1e54aab065164004264c3"}) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1243.625724][ T2410] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1243.783089][ T2437] ref_ctr_offset mismatch. inode: 0x4290 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1243.807241][ T2442] binder: 2436:2442 ioctl 80086301 20000080 returned -22 [ 1243.816537][ T2435] sp0: Synchronizing with TNC [ 1243.863193][ T2443] debugfs: File '2438' in directory 'proc' already present! 23:37:46 executing program 1: r0 = socket$kcm(0x10, 0x22, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) 23:37:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xd65b, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x4) [ 1244.050173][ T2449] binder: 2436:2449 ioctl 80086301 20000080 returned -22 [ 1244.070260][ T2443] debugfs: File '2438' in directory 'proc' already present! 23:37:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086601, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x4004556e, &(0x7f0000000000)=0xffffffe9) [ 1244.518174][ T2457] sp0: Synchronizing with TNC 23:37:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@isdn, &(0x7f0000000040)=0x80, 0x80800) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000200)={0x1, 0x8000}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x314, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:37:47 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x9b1f, 0x173, 0x3, 0x81, 0x95}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x101}, 0x8) r2 = socket$kcm(0x10, 0x7, 0x10) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000540)={"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"}) sendmsg$kcm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) mount$9p_virtio(&(0x7f0000000200)='\x0e-\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x20000, &(0x7f0000000400)={'trans=virtio,', {[{@cache_none='cache=none'}, {@version_u='version=9p2000.u'}, {@loose='loose'}, {@afid={'afid', 0x3d, 0x3}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_loose='cache=loose'}, {@cachetag={'cachetag', 0x3d, '/selinux/checkreqprot\x00'}}, {@posixacl='posixacl'}], [{@seclabel='seclabel'}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, '/selinux/checkreqprot\x00'}}, {@seclabel='seclabel'}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) [ 1244.865690][ T2477] binder: 2468:2477 ioctl 80086601 20000080 returned -22 [ 1244.911889][ T2472] sp0: Synchronizing with TNC 23:37:47 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe603000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1245.042807][ T2482] binder: 2468:2482 ioctl 80086601 20000080 returned -22 [ 1245.210620][ T2493] debugfs: File '2488' in directory 'proc' already present! 23:37:47 executing program 1: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x3fbdb8dd115e6d67, 0x0) 23:37:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:37:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000000)=0xffffffe9) 23:37:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80087601, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1245.665611][ T2500] ref_ctr_offset mismatch. inode: 0x4181 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:37:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x128, 0x0, 0x0}) 23:37:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @rand_addr=0x80000001}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @broadcast}, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7fff, 0x1, 0x8}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000000bb3c5d00"/23], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300)=0xfffffffffffffffc, 0x4) [ 1246.075463][ T2520] sp0: Synchronizing with TNC [ 1246.082055][ T2522] debugfs: File '2519' in directory 'proc' already present! [ 1246.100153][ T2524] binder: 2517:2524 ioctl 80087601 20000080 returned -22 [ 1246.127599][ T2527] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1246.265137][ T2527] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:37:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 1246.386282][ T2533] binder: 2519:2533 ioctl c0306201 20000080 returned -14 23:37:49 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1246.431629][ T2534] binder: 2517:2534 ioctl 80087601 20000080 returned -22 [ 1246.484684][ T2538] binder: 2519:2538 ioctl c0306201 20000080 returned -14 23:37:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001920000bed0080647e6394f20100d2cb0500fc3711407f480f000300070300000200009ef88000f01700", 0xffffffffffffff3a}], 0x1000000000000037}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x4, 0x0, @start={0x1, 0x1}}) [ 1246.816800][ T2520] sp0: Synchronizing with TNC 23:37:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1246.998279][ T2556] ref_ctr_offset mismatch. inode: 0x429e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:37:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x6, 0x1, 0x8, 0x6}) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:37:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f0000000000)=0xffffffe9) [ 1247.343229][ T2576] binder: BINDER_SET_CONTEXT_MGR already set 23:37:50 executing program 1: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 23:37:50 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1247.554127][ T2576] binder: 2569:2576 ioctl 40046207 0 returned -16 23:37:50 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x4000000000000002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x10000, 0x2, 0x1, 0x101, 0xf2, 0xfffffffffffffff9, 0x10001, 0x3, 0x2, 0x0, 0x0, 0x90, 0x83ce, 0x0, 0x62f4, 0x200, 0x6, 0xffffffff, 0x63c1c3d9, 0x100000001, 0x1000, 0x2, 0x1792, 0x4, 0x0, 0x0, 0x0, 0x0, 0x101, 0xf01, 0x0, 0xffff, 0x0, @perf_config_ext={0x8000, 0x401}, 0x21180, 0x0, 0xe0c, 0x0, 0x40, 0x7fff, 0x68b4}, r2, 0x0, 0xffffffffffffffff, 0x2) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='cgroup.controllers\x00', 0x0, 0x0) r5 = socket$kcm(0xa, 0x0, 0x11) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x9) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001580)) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28000000000000002900000002000000000800000000000000000000000000000400000000000000"], 0x28}, 0x0) [ 1247.639100][ T2584] sp0: Synchronizing with TNC [ 1247.762083][ T2580] debugfs: File '2579' in directory 'proc' already present! 23:37:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1248.128451][ T2607] ref_ctr_offset mismatch. inode: 0x4268 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1248.140433][ T2584] sp0: Synchronizing with TNC 23:37:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x10bf1b97fcb93f04) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440000000000763044003000000"], 0x0, 0x0, 0x0}) 23:37:50 executing program 1: r0 = socket$kcm(0x10, 0x26, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) 23:37:51 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 23:37:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x40087602, &(0x7f0000000000)=0xffffffe9) 23:37:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x200, 0x8004, 0x3, 0x1, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x104, 0x3, 0x10001, 0x0, r1}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046305080500000007d42700"], 0x0, 0x0, 0x0}) 23:37:51 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1249.174969][ T2646] sp0: Synchronizing with TNC 23:37:51 executing program 1: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1249.382069][ T2663] debugfs: File '2657' in directory 'proc' already present! 23:37:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x4008af30, &(0x7f0000000000)=0xffffffe9) [ 1249.622263][ T2673] ref_ctr_offset mismatch. inode: 0x42af offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1249.666429][ T2663] binder: 2657:2663 unknown command 134570756 [ 1249.672553][ T2663] binder: 2657:2663 ioctl c0306201 20000080 returned -22 23:37:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000080)="751f56a42008a4c3e03460b42a004549af9d164f0143ac5af4ea51ab761b7c40c0f14c896695243b51c25a196ced003e8b4283ca9a4fd0d210463991dd0f8aee22c79e") sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x1, 0x4) 23:37:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1250.089261][ T2684] sp0: Synchronizing with TNC 23:37:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1250.124719][ T2695] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1250.132977][ T2695] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:37:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x100) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x6, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="bc1ea1df1fde9ee96552c057f8a8c69259f6a1fe5d8e6623ae081048aff52123b43c7b9c61f08661db22449b938022cca80dd4a1adbf172df7f53e7fdfb4717dec1fa5cdbbadc47c6767634b1d021b409aab5c8928e1dd0ff150316351a7f011647e5be92469d7c358c6de9ccf2e2492411f787c0d85d1e8cf076e3d4bdd1fbca7cb075ef9934be749a71a4da0c79757086ede203e312205b9fae3c9a9f095d97a752a52b7681f7f45220c107efaf6a04c856d3e863038cd275cb4ec76cf975fdc045b9727b703f5695eaf36a7b24f690612835fbe11d70c8a4c0c5f9a246846e6e22d6c844e9ec9e6b0"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000076304400000000000000000000089a26b9b1831311ab617f83a417948068519bbe25b65644941623cf8d48177852431c8f106922da1792935450041e7a48779eb969579b0656db29ef119ca05fbe9e390542521093f"], 0xfffffffffffffc9d, 0x0, 0x0}) 23:37:53 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1250.612275][ T2710] binder: 2709:2710 unknown command 1661403136 [ 1250.621532][ T2707] binder: 2706:2707 ioctl c018620c 20000080 returned -22 [ 1250.685491][ T2711] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1250.693618][ T2711] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:37:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1250.770040][ T2710] binder: 2709:2710 ioctl c0306201 20000080 returned -22 [ 1250.816920][ T2708] binder: 2706:2708 ioctl c018620c 20000080 returned -22 [ 1251.032662][ T2723] binder: 2709:2723 unknown command 1661403136 23:37:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x420200, 0x0) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1251.141390][ T2723] binder: 2709:2723 ioctl c0306201 20000080 returned -22 [ 1251.154501][ T2715] ref_ctr_offset mismatch. inode: 0x4181 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:37:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x40106614, &(0x7f0000000000)=0xffffffe9) 23:37:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x32a, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:37:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1251.674544][ T2737] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1251.694098][ T2738] sp0: Synchronizing with TNC [ 1251.781866][ T2737] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:37:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1251.912454][ T2749] debugfs: File '2747' in directory 'proc' already present! 23:37:54 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1252.114468][ T2757] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1252.173165][ T2757] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:37:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:37:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x40107447, &(0x7f0000000000)=0xffffffe9) 23:37:55 executing program 1: r0 = socket$kcm(0x10, 0x20, 0x10) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x40) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1252.474946][ T2768] ref_ctr_offset mismatch. inode: 0x42be offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:37:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1252.848461][ T2775] sp0: Synchronizing with TNC 23:37:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000300)={0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000180)=[@acquire_done, @dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x1f}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x2, 0xd}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}], 0xa7, 0x0, &(0x7f0000000200)="1676c90d6d0a3f4a74e4f7424e73413fc75ebe1d1ee034867b06543cb91060ba529560fc7f0070f5dfc24d47654923d2e917333c7659dad414aada371fb0a0dbafecd39c85244427c64e99e024558d9feccfb1eca1b2f4047775585dd0d477aeaa1abefec3f8a49661b934ddcacd3b8e4862f715c3e6e7d10add21d78b39ecabee8f647212a99d6b902921ce67f94f7ee5f53e63f55fe19d68c9df652791bfae2c701487f12ae5"}) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x9, 0x101000) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) 23:37:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xbd19) 23:37:55 executing program 1: r0 = socket$kcm(0x10, 0x26, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) 23:37:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x4018920a, &(0x7f0000000000)=0xffffffe9) [ 1253.245153][ T2791] binder: 2789:2791 ioctl c0306203 20000080 returned -22 [ 1253.431380][ T2802] binder: 2801:2802 ioctl c018620c 20000300 returned -1 [ 1253.470451][ T2804] binder: 2789:2804 ioctl c0306203 20000080 returned -22 23:37:56 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1253.626777][ T2802] debugfs: File '2801' in directory 'proc' already present! [ 1253.705274][ T2808] sp0: Synchronizing with TNC 23:37:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xbd19) 23:37:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xf7a5, 0x2000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x400, 0x4, 0x8001, 0x4}, 0x6) [ 1253.809389][ T2802] binder: 2801:2802 ioctl c018620c 20000300 returned -22 23:37:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1253.900629][ T2819] ref_ctr_offset mismatch. inode: 0x42be offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1254.027002][ T2808] sp0: Synchronizing with TNC [ 1254.292440][ T2843] binder: 2838:2843 ioctl c0306205 20000080 returned -22 23:37:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xbd19) [ 1254.486231][ T2846] binder: 2838:2846 ioctl c0306205 20000080 returned -22 23:37:57 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0x4, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:37:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="99f9bc653066"}, 0x10) 23:37:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000000)=0xffffffe9) [ 1254.784668][ T2852] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:37:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc030620c, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1254.885450][ T2857] debugfs: File '2856' in directory 'proc' already present! 23:37:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xbd19) 23:37:57 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1255.127801][ T2852] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1255.256356][ T2862] sp0: Synchronizing with TNC [ 1255.262432][ T2867] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:37:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6, 0x2, 0x2, 0x4, 0x5d7dc90b, 0x4}, &(0x7f0000000180)=0x20) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) [ 1255.394677][ T2867] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1255.508309][ T2879] binder: 2871:2879 ioctl c030620c 20000080 returned -22 23:37:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xbd19) [ 1255.714226][ T2888] binder: 2871:2888 ioctl c030620c 20000080 returned -22 23:37:58 executing program 1: r0 = socket$kcm(0x10, 0x6, 0x10) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="cefaad1bb83c000041dc827e", 0xfffffe69}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1255.769049][ T2862] sp0: Synchronizing with TNC [ 1255.799365][ T2880] ref_ctr_offset mismatch. inode: 0x42c5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:37:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0481273, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000000)=0xffffffe9) 23:37:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffcff, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 23:37:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xbd19) [ 1256.439197][ T2919] binder: 2915:2919 ioctl c0481273 20000080 returned -22 23:37:59 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1256.526088][ T2922] sp0: Synchronizing with TNC [ 1256.585324][ T2923] debugfs: File '2920' in directory 'proc' already present! 23:37:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1256.849882][ T2922] sp0: Synchronizing with TNC [ 1256.891823][ T2936] ref_ctr_offset mismatch. inode: 0x41e1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:37:59 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xbd19) [ 1257.165951][ T2934] ref_ctr_offset mismatch. inode: 0x41e1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:37:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2f, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:37:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000000)=0xffffffe9) 23:38:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b63ffff00000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:00 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xbd19) 23:38:00 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sequencer\x00', 0x400002, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000007c0)={'ip6gre0\x00', 0x4d7}) r1 = socket$kcm(0x10, 0x2, 0x10) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000800)='/dev/usbmon0\x00', 0x10000, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={0x0, r2, 0x29b88948f9b54ca4, 0x1}, 0x14) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000500)={0x3}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000840)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000880)={0x0, 0x0, [0x6fcc1d37, 0x2, 0x800, 0x0, 0xd6f, 0x5, 0x1ff, 0x3]}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x4e21}, 0xffffffffffffff4e, &(0x7f0000000100)=[{&(0x7f0000000180)="d38e5da799db80351be2170028e042bc279e6196e78450f3f69049a9e72972052cdbdaa3aaddfa22a905f14709daf6e4314df5d647cac6be5b4aa57626d9e4111ddc28003d8bd60c52f6004271d71a1a8c19b1a524c8abee007e5f0b8620dc441ee2e5f8c5867a5c63f2898cfe1e4d82d94dccbeed139fab963c6679b65e8d2690139a5dab46dba6", 0x88}, {&(0x7f0000000240)="5a425370dcb3173c424bb87dbd46aaf10b052c44414878c8096fee5774b9101d35c106cd5de33699fc5e8fdc2861ade447be17af85b40c47e4017ee9cabcbc94c2d06b8d282b1718a940a6eb9fdc6140eb62cd6ccda0ff981a386258805b8895caf2e2add97e49506a53aa3603a51cd424ddd6dc2bf015aa2992cefa78898162a1c6ebb8f2437cfbcb3b2e05fbe45fb3fd1a3c7f07757f16987e1d585acd533a380657c38f60d29f33a959755cba7f54e0a36465de95a9a14a03ada20d6740ea7f6eddf6e358e1f01c5e2f3099cdaeffd8df6a1e841b6ed634b0ce0f9e21596444d13157cdcd1616a776a76f8e012195cf5ea7fdd81d9727", 0xffffffffffffffd0}], 0x11d, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x110}, 0x44010) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="920000009ce85ba13424abb95ce7c48b4869afdb6ed35e5745ae6a9440ce47ed49fed0981b171c79cbae77c6544fba033bbcb41e1eaecf0a27da53d625ff13b4a3c93fbe4a799bf118b80f4f5fad6037c6328c824585c52c520e0fcbc1ab38f54348b022cec1ba1ec462d13aaab371ebf7ce3d45ef1abbe879a70cfe6195b116ddece3de35fe75bf4b4ac4de0828c1"], &(0x7f0000000600)=0x9a) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f00000008c0)) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000940)={0x4, "4ce6483e38168f695a63e314c20256e46528698aca1871d96bdb799cb9f3318a", 0x1, 0x80, 0x37, 0x8001, 0x4, 0x3, 0x9, 0x1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-control\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000640)={r5, @in={{0x2, 0x4e24, @empty}}, 0xfffffffffffffff8, 0x26, 0x7428, 0x9, 0x7}, &(0x7f0000000700)=0x98) sendmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1257.775621][ T2975] binder: 2965:2975 unknown command 0 [ 1257.793451][ T2968] sp0: Synchronizing with TNC 23:38:00 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1257.858760][ T2966] debugfs: File '2963' in directory 'proc' already present! [ 1257.869414][ T2975] binder: 2965:2975 ioctl c0306201 20000080 returned -22 [ 1257.952449][ T2974] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1258.061161][ T2988] binder: 2965:2988 unknown command 0 [ 1258.066948][ T2974] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:38:00 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xbd19) [ 1258.154653][ T2988] binder: 2965:2988 ioctl c0306201 20000080 returned -22 23:38:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="046304400000000007630440000000004b5fc4cc1002c264bd6af8dff591fdeb6b474642604869269ae364a11cf9bc12a64566eb6f4fe2b43a39eb10bdad76eaa6632f351519cb8d6a802b81989b0c369e36d929a4ede39b4783f724f86ed2517fc5ac5c17cea4282deaec186eb9b9e9ba65536345296571e63b2bbb2aa1536c20af9122cc56a8d98b9a078790e8288143fcd2634e3506732315b7b68e19fb6175c62ba8cc743e791edd1e2ccd18f7818ce01f980c781c72073ef73bf2e6406d551b7efa5fba336107e4751c832923bf293b2927a48a063459615ca774da362bce78bf6ecd"], 0x0, 0x0, 0x0}) 23:38:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x800454d2, &(0x7f0000000000)=0xffffffe9) [ 1258.275886][ T2996] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:38:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x223, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1258.404478][ T2996] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1258.491945][ T2992] ref_ctr_offset mismatch. inode: 0x42d1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1258.787306][ T3008] sp0: Synchronizing with TNC 23:38:01 executing program 1: socket$kcm(0x10, 0x2, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) getsockname$netrom(r0, &(0x7f0000000040)={{0x3, @bcast}, [@rose, @remote, @default, @rose, @remote, @default, @rose]}, &(0x7f00000000c0)=0x48) write$tun(r0, &(0x7f0000000180)={@void, @void, @ipv6={0x97, 0x6, "deb649", 0x133, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x2b}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@srh={0x4, 0xc, 0x4, 0x6, 0x1ff, 0x20, 0x0, [@loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="e23ac2bc401b29773f6728c83e78efed", @mcast1]}, @srh={0x3b, 0xa, 0x4, 0x5, 0x875, 0x20, 0x7ff, [@ipv4={[], [], @multicast1}, @mcast1, @local, @dev={0xfe, 0x80, [], 0x24}, @empty]}, @routing={0x6c, 0xa, 0x0, 0xffffffffffffff6e, 0x0, [@mcast2, @mcast2, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local]}], @tipc=@payload_conn={{{0x1b, 0x0, 0x7, 0x2bb, 0x1f, 0x6, 0x2, 0x2, 0x5, 0x0, 0x2, 0x6, 0x5852a2e2e8bde51c, 0x0, 0x5d37, 0x8, 0x1, 0x4e23, 0x4e24}}, [0x0, 0x0, 0x0]}}}}, 0x15b) [ 1258.865084][ T3015] binder: 3009:3015 unknown command 0 [ 1258.922318][ T3015] binder: 3009:3015 ioctl c0306201 20000080 returned -22 23:38:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r3 = gettid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)=r3) [ 1259.106044][ T3023] binder: 3009:3023 unknown command 0 23:38:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x80086301, &(0x7f0000000000)=0xffffffe9) 23:38:01 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1259.244647][ T3023] binder: 3009:3023 ioctl c0306201 20000080 returned -22 23:38:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:02 executing program 1: r0 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) connect$rose(r1, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x4) [ 1259.464098][ T3039] debugfs: File '3034' in directory 'proc' already present! 23:38:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc0306201, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1259.701937][ T3038] sp0: Synchronizing with TNC [ 1259.779789][ T3047] ref_ctr_offset mismatch. inode: 0x42df offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1259.837276][ T3058] binder: 3052:3058 unknown command 0 23:38:02 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x8, 0x100000001, 0xf9d, 0x1, 0x9000000000000000, 0xfff, 0x251, 0x5, 0xfd5, 0x2, 0x1}, 0xb) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) [ 1259.931734][ T3058] binder: 3052:3058 ioctl c0306201 20000080 returned -22 23:38:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200040, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000000)=0xffffffe9) [ 1260.115187][ T3067] binder: 3052:3067 unknown command 0 [ 1260.194493][ T3067] binder: 3052:3067 ioctl c0306201 20000080 returned -22 [ 1260.305087][ T3068] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:38:03 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1260.464598][ T3068] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:38:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x2, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1260.624746][ T3074] sp0: Synchronizing with TNC 23:38:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1260.655524][ T3079] debugfs: File '3076' in directory 'proc' already present! [ 1260.714986][ T3077] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1260.850189][ T3077] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1260.890908][ T3092] binder: 3085:3092 unknown command 16388 [ 1260.994130][ T3092] binder: 3085:3092 ioctl c0306201 20000080 returned -22 [ 1261.046604][ T3097] ref_ctr_offset mismatch. inode: 0x42df offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xde308ad3c52900fd, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x9, 0x4) 23:38:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000080)={0x5, 0x1, 0x0, [{0xfff, 0x1, 0x8000, 0xfffffffffffffff9, 0x3, 0x2, 0x8}]}) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1261.256254][ T3107] binder: 3085:3107 unknown command 16388 23:38:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x80087601, &(0x7f0000000000)=0xffffffe9) 23:38:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1261.383727][ T3107] binder: 3085:3107 ioctl c0306201 20000080 returned -22 [ 1261.571161][ T3119] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1261.578967][ T3112] debugfs: File '3110' in directory 'proc' already present! [ 1261.715434][ T3119] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:38:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1261.853440][ T3122] sp0: Synchronizing with TNC 23:38:04 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1262.052010][ T3131] binder: 3128:3131 unknown command 64 23:38:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/35, 0x23, 0x2, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @register_looper, @free_buffer={0x40086303, r2}], 0x1000, 0x0, &(0x7f0000000d80)="e4d5faf3c389bcc1009bcec4c54b9ff5d6199a37075206855b26e55229161b8045778cd2dfc20dfd8350303d27d1ba159c888bd847c01c5cc0ea76bed412215e98450c380c0ac2f14d39c965896e41fda7b9acd28473649fb0470a1633d16ec85c4ef0c9c513285ca91d6b79c1b255585be8a12cb1675280fae29db280a37c849bcedf4797918c521f41b74380807ea72614385e19570489af4ccc9c079fbaba32bd439ae26ef1ff862800e4bcf075a4ebc8d63eaa48fa9bd380bb7dc2ef6697d6c69903dd5d6ac7f7ed65e7427fb10871b00134e137721b8e49e66fdf4dbe908f3b42d04963ec178c8cac7023317a70309a5091a7598a7fe87134635970eb9cbfc5d68b09d9cae95fbe66bbf70872bbc8354c8baa79541d652345516ac2c784c64bfbef49e6e1117f8d604699ff1df275cbca1ccba299066e1ef908f390a228681cfe21c0669ae56ccdf99ce10aa834f7da3658f4d3be68543348ca7e18ceea8c79ae8a166ea4aa7e63abc70f4afc18c400872b1a5f0de09107d1a882b4e5f6dfc188764f59f2dc28e261d6a4ac578f045587040cbde158895d0353ee5889313fbeedbc9956ad43821562bcd00d3ec990d20a175b164fd0f210fcd261198db5e529309aac4ff6f524a3e7e0484727f5e380dcd91cd62a3ef28d0c882cc27e57ee7476c4106c7bb58cd16042241ad719bd8b8ed3f57a411f5c093c8559a584730516b97a5909dbeb5aa0f9dd90406cdf012ee9ffa6b941ed8bdb115b9a0be5cdb1128c350466d3b10c1d20ef591b3df874a9791013775aa2f8cb3294acdb7102a20929131fdbaefe2e60849f8af1f437522ab2b5e79cd42a7ee27a1c43795d8c0af2cefae2b195bf0323f80d161e0ea50426b0b6dc1cf4ffd064b6d5dd2acb428f50d366ee275c9031c145f97a3dc9827f6b9ad0376bb5b3c69ea136e9c60af0d5118d940ecfae2e9152c38cc22f5631eaeb90722ffef65d8a8c2c968d3ed59a18819ccf2a8372f9ee5d8abd85b771e99d8656e102fed0f0d7c1566884c4cbc3c4c3c7746aa8284a80a9d08d08ab69a46b27d38f1c15f52b01596d68e1dfd50ad601267142e77ac7485deef875ce49703cdb5463c353a5af6b161dbbcdf7d743a69a32c75d118139dbf0c353da4c14577db3476d6d768261faf38cff3c17abcd33b779c274008ee72fa43c56c5264ca29cf29bd06ca95a966f62c4de10758eb3fc28b5bc8eb28634e9e49d7125b63425c2567d797436cefbe3497562d0dea3d5f0ff16f99cbe2d748d31aa4fd4fb1c410d5a6c9e08872dcbaf2aca388a1c65319f7d8c5a36d1512280bf3b824091fb02cb0c6a8267cd370361da1d41a5911ae2aa9976a7e0d4a874c136533be18a56999b9facb62f37640401c0060d726bad50ab25fda53af4dbf8d33998fa14dc54d0184bc7d3314c00b1a784fdbfe592dca86259e36de5c958774064153d7520a865dce118818792b86cd844304f1203832f996c7501b2b949ca5353f76603f5edbbc383744e9d875073c6e878f01659a303ccf37758d9e82b0e325b36b11913316959c18b6f3db51feaf06c2a95fb499a51b8556df4da4894b5366940541f7d558fe2e6285b76d0a01210fa3f387d0b83e6374e8c81df47e8db180338ce7d0dd6177e6a0f2971f760263fc0c5572b46fdbf4b376d8c7ab7865b2b33ca55297e53b75b523273f70bfccf04fbdc7ffb9d1e05f499074c33fd8d3b275ae7345fb4361e095a4f53c3d4d379d9770b3166accce6e96e069ade8cc895c646b9814a3ced2cbc45f53410f0a7a197746f81c11fcc29e1a5dfd6a2e07a92036a10bfee3cc3c794f3cb136bdc26e2046cfaa27c4abac1e678b04204f98ba6c96302b50783ec20b6ef4e77ff82aa208ca9bb7b2bceb8b17e8af7dff6c5d1d01d9775819b7ffd0f2aa083936dcf132c689fc31790ee1d076a7f33cd57b77d6748de64a06345bad72d0cb9304880f700cc54240d4bf7c0fb2a14ae856df7097b03d34e1a84916201997fbcfaf862a8e2cfa50274e629db09cff72c8429ffde90ca7b178a7d77e89ab1e608d936d54df6beef12dbcab83250e0110ec1267d40e5b3a16c013530c3e05c72127b8302f870849dbcb8120389271d1f54ec11f14861aa83c7df2c82eeda41560d0f220c5777c0917e439db06e8caa489f2c0661122861d2f6b013bc2197354b2847a4d9e4dc6c21acb651081e6d600a9aabe71451e81958a7db2dd3e45560922fe07968fe8c66d0707521b5d49846b394896cda7b7d5a24a4d0587f9fd0fc465e292bf77779541a565b14782860690e0d695cc54754907ddd38373953fae88200ba5f0f2355ac782e76a3e7745344a20e6bea914a4b54c4ba270238b2837e9f624b0dbd6acf637bc4647328952ff411d795e22371da3d05561c88189334cb5a666a3a49eacefcf41112d418c9a0f01fdbe322cb8b835fff4431581f481437096d8491c69050e0f3d9ea0cb916fa2fe8f4f2c26bde1073bc6c3ac6e81a07912d49c5e3721787216fdaf2262a423911aee387c6a86783aa8ae6a8c2f167cadfddbc9638023117233e51f24e32c116313c985b4431140c3654550c6a872628c8b05e5e80bb8d2a6024890e88f9b9cec4672c0e6c41fec4d32052bab10fe291dd3ce8a579147c12f1c9a665ef24a98076dc1c000aa58a7be465da4497d73fbc543422794583a84bc08b205983f2fa397399c505b4ebb6edb9af2d35fa90072b43921a0dee94b2d7f41040e6f6bae9300e757e5911df8e8866d8fd5fe47038bfcf78a44464f650d97a001de70aa620fdb3fe28bd21b7b132ad619574588eeff6ada94f236319cb57d8840c9029191b7229e58fda7c9a4293242e0d5e7c6fbaaf79ebe2ec546a4eadb676315264a1f2eafebeb173c5c103e20338fa586a0ec5f3201988195c139e2673bd66b160f44248dbed9ee21478e8e4b8903f872211121d8943b71b5e3ca199a9f30c670ff4af44471d9d6f4fc81c37ae2804b69176d3fb25d2764e1ac3b8be555264ef6b1f9c8cd97c69ee078c3cdee4e87ab92211bcdfcb9e23c0daee82f79c911c2b4db544a0c7eee00a8d966cc1a468664d2d67485bcca37a3e6eb2781dbe29244feacf284edfd81b86e869110cfb99e09865958be6766c9ea9508859e3a2bd3311d80dd1a1cedde1010aac4ae157573955205ea10880b4b987cd450d5daadcd8385bcde23499bb1539b4ae65201c92ab0fc9db9d99118b309d98e76aa50fe8938087119eafc05180c510c6458bb30d93ba6bf7d6bd446528ecbcb09000d7144bce7133aeb512fbfcaae4e797fd25b7efbed1a8097952487230a9a5c9c8d8927a4c40380c42067d367a873c4d1556152ed34f2afb407191e381e266503ea7891b2ae0d3b0e5a908593cf6824763493bfa26e1d3e97b699513a2f138a35f1c36dac8ece428ee1c63fa67f2effbb84bf19e86b373dd0d51264d60c51ac1cce52e76ee46e7360dc2f8b1e6806c774b3e10e4d65ecd60058bc77d959b647c03d6a2ffd0bd0f1602c2936da84fdb043e487d01cbe917ca25d5f0572785b2f80b6d77b1bd471a9814a245b96e738333c60dd812d2c963f825c6b3c904cd678559305c78a2c9b30cab0f90e5427c276fd17e0c4878f1bfd16e276595e5bb619fbf8cd0f49e618bf589bc6c234aa36de33e616c89a35d612a5c5f621f60c4b03f6f81324718d8ec1b325fe123eecbeb38edf7e5f1f7bcfae8862de96a8be4d5e9038c886892744214faff2304a943e5495477a1e28538a5c6d1fe3222b64f94a9ba20afec5b1b241bc5680877281bd91d5cef5cbefddafe01b131d47f58a49488a4ac5859ae7b62b8252aee959c29e2526ff5eae407651ae25bdf3846cbaa382bcc9da2004ff6fa593982f4b68521d74261eb505c21e279eee1a1e6544897d1d2a0cf64a84e812db89114b6fae4bef1749c74d3c4de24907664b81c842821eba1f1f03227fda2f1b2d7fde23ab16ddf7381f311f4de3855998318ae3936cbd60a128eb21e2086c3609f4c0967a0910643f616c62514fc0294763e76f4f090b0cb8e1b3aa4e4713f95c318759bd30f29d05b012d4111f375862dbe907ebcd5359047d68b6578085baaa8d7aeae7a512a609c111f42d3894aff5960270fc159d4e52068c26f53b9e75bd9ccfbdd069de692ce71106ebd03249e6d0ddb3821cde4a2f5ee6aa8fe35e641082e684e0694f1aadfbada2ba9d876a329b70d7077037a21f9f81014c4da16ff8b6338743d4ef19b750898c9e222e075c2cf9697a7bec4365f97c61948050a670a459b4d4737928a1d926eeb5bc25e3b09b76217c0ff7fbe5acaebc20bc55b9d385c6a0304959836df02d40886ca03f73d9f7b78d515eae24a23f2e2b1ed4e575c1686578911cf14528f907d073750e83690a330ec538912b06ec7836d2f941736bcf8e46774c377d8672d0d6e4869645c76e179693b948301b77acf0bc4002195bda3d2fbe345060f541e045737d9c9d10e6d936adcf1e9ed6d05bda45e7ed4bcc68372b32f3d12478cf266ccb4e344ba3beb5ca2b7dd561401b92846aa1f57fd4f31c9030c05d29adbe06165f91d6c6ef198f333db7ef53667236ca0ebed71a24dbcb6b35d4cce989ada964d6aa1e7febe85eec4d2f7abbc24f5f3e4063ea5deca47beb281db2126bb55c3f34707bc99dec5f3f1dbc0373676ec1c66be7a8465f84dfe40a352eeb344aef32825a7b67c71a336ae3dc065d4820224ff80233d7a32550099ac584bce9a8014c42bdc30f8426bceee5ae370e4b738dffe35efe2fdec8b88eedec726868433a5a7fda5f9d0534020065215b5670a8f2baf5ffa41623fb192e749af167613ac5908605d833a43f7d99ed1ed5795c1733e8a1a987916db750d25711fe800b3931abaa6f2f51333bb730264facb2e8131d7d70c4aa65c2fd7bf6bcc8838574142ca1cbc304c158dcded9f389d4da82541596ac0a3c6441ca013445d3c1b0656aaf6f6ebeb47d1c95d7d1087436d375b092e4f35c57ab4f99b8c8cab65c61dcc92b2f709a4acb3b903688b9624d10f916454f9da8810eb022ccb88e385a0f210a295f4dd61a43c7368c502bac44be7c45973ce3e253319b4e6e1849fd9356d6c4be447dff5e60c10c9fdbe5ee3b7e395b4c819cf93e6769490b20681e4010352a394a25d70f99960034c886d9d21f172463e6a029bdd563a5745b59f89f5b73c1315f6b35738e1ddb787a8d12cf93a69f55e4656b8ba9ac19b80eb6de640e7253e7b75da03ce0aba0b6260af83d056c83600494fbe29b10b1722e8c5dbd2325c8e9f1f4170a71d3da840fb004f8af0d2114e8e1cdec60ab960c8d1e43faca1c62a9891438a75d5b1b00aef364729880b144e5575c0a70d553b10ac4d9a8af929c2d6e333797fb6a0563e43690179c7d7f5d95d1660a2fbe48206749168beacf0f3c94d1747f60184f560a607d8bb07157d4381e24f03f2f82a1b234f895de5c15aa6dd6f2523f19fa3aab37b4b955a625f2feb8585d3b153ce7b7f997f0a733858a80f218b2dc53b88828dc7b91a78ef6e0a521ce1d6f1e75e44efda5c51659f656f6412b9174ff970058276045d77b96012951af0d16a36dd5133001cfb94ba7dba8a2286b1fc068f89dbcedecbf81f053cb065bc01ba9543f94128d60a54896edefeef488e7df12b1e75fe7a42ddc2873eff1a83d3e6ced0908aaa16c69d9d2b19afec9f180a0293fe9abe3cd46d1404b4b229bda0504abed57c0f1e48dd1b26cef5486ad3dac8c93d74a619c80c2a0099e22ddad6af"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 23:38:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x800, 0x0) fanotify_mark(r2, 0x4, 0x8, r3, &(0x7f0000000100)='\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1262.344479][ T3131] binder: 3128:3131 ioctl c0306201 20000080 returned -22 23:38:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)=0xffffffe9) [ 1262.452438][ T3156] binder: 3128:3156 unknown command 64 [ 1262.579973][ T3160] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1262.618922][ T3165] debugfs: File '3157' in directory 'proc' already present! 23:38:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1262.670228][ T3156] binder: 3128:3156 ioctl c0306201 20000080 returned -22 [ 1262.706701][ T3152] ref_ctr_offset mismatch. inode: 0x4091 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1262.759881][ T3160] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:38:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1262.908599][ T26] audit: type=1400 audit(1567381085.471:125): avc: denied { setopt } for pid=3148 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 23:38:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x2) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x12, 0x0, 0xcff2, 0x7f, 0x11, r1, 0x0, [], 0x0, r2, 0x4, 0x3}, 0x3c) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000100)=ANY=[], 0xffffffffffffffc8, 0x0, 0x0}) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x20100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000000c0)=0x9) 23:38:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:05 executing program 1: r0 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="9831762ff10610651367ab2b1a8463e7b4c11d4959ad61ffb4264315be1333ad8945d2cc35dbf4a55bac71cac29ea7f18b00fce134349cb017b8ff90488397891d09fd458db8960bc0d0e11d9bb4a799215e5661bee2cb67de49c77c9bc8d9e199cd9ec9d536e1bdfff4317ef0d77df1565264b09e557861b6a3502f93fb727068a6"}, {&(0x7f0000000380)="837e6c81ff24faab8f7a8fb6f7c75b5cad1f85ffdf7410131c6f1db4721bdef2ebb10350794c240a34fd7ff21b5e669bca1fdb53d4f71358ce5bc15956922bcd58ce53098e6e309091a3077ebe80d60e85daa11467b33cc2ac8770040dabea26ff62e8ef143776095f2288277609257ac6d3dd5522a07973cb6f995792094057c7726d9a322d1d10bb30ec7b6217808fa2db68c98e33fb2551ad173ecf6fc1a95d064637b8570eacd9c93a5e26bbc6e4e85805d820f32f57e7081dcd8d5e70c38f2c6244532b95dbc238045eb4b7fefb9828978e4deac710f5f5aa53c2fe"}, {&(0x7f00000000c0)="65f1a3d3ad367170df8e70f0f107d429f2892d775fb250b0b0b43630222c38e8f092b8154bce38ce0f465ec4db48d08ca507c47bf8503ec002d1a6c330af67e20a2deb9ab11c9839dbb957c15c6bebdf026c97e127bd9b800089797db1370bac4d8595f719a340692f5f4c4a4cf744", 0x318}], 0x1000000000000113}, 0x10002) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x32) [ 1263.268786][ T3185] binder: 3182:3185 unknown command 0 23:38:05 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1263.444493][ T3185] binder: 3182:3185 ioctl c0306201 20000080 returned -22 [ 1263.464615][ T3167] sp0: Synchronizing with TNC [ 1263.578752][ T3205] debugfs: File '3195' in directory 'proc' already present! [ 1263.624693][ T3170] sp1: Synchronizing with TNC 23:38:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1263.794860][ T3213] ref_ctr_offset mismatch. inode: 0x42e6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1263.815399][ T3223] binder: 3182:3223 unknown command 0 [ 1263.824168][ T3223] binder: 3182:3223 ioctl c0306201 20000080 returned -22 23:38:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)=0xffffffe9) [ 1264.017025][ T3234] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:38:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x5, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1264.228572][ T3234] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:38:06 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1264.442127][ T3246] debugfs: File '3245' in directory 'proc' already present! [ 1264.568337][ T3252] sp0: Synchronizing with TNC [ 1264.755505][ T3257] binder: 3248:3257 unknown command 67108864 [ 1264.785444][ T3257] binder: 3248:3257 ioctl c0306201 20000080 returned -22 23:38:07 executing program 1: r0 = socket$kcm(0x10, 0x7, 0x10) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x8, 0x3ff0b3b1}]}, 0xc, 0x2) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000480)="07456e7a15b8b6306d7d51742d80140433262e8a86f4f898de09f2cf2aa0a1327d41808e43d7a39ef45f31f9003a1f1d2b6993f8a781623ea218713f6abdcd912286cfc658d3b52b050bc544ebce60a3af1147e52aca1f8cc2d7591c5c490fa9294f862bca5770c4086703f441fcad61684ed7255551eefb251014ab1b1e2876025dfee38012a91d6ea1e1ebf04b2442ee2a98ab09effcd6af3f2bfc35f62f91cedc1b6d1397d2543e40f388923a7a004b62548aa48d4034f99164811acf149ee507082030057b86a6ce8f62") r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x9b, 0x3, 0xffffffff, 0x7}, {0xc33, 0x9, 0x8, 0x8}, {0xa884, 0x16, 0x3, 0x2}]}, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xfb15, 0x201) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x73) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="6669e76ba1d423000000000000000000000000000000000000000000000000000b00000007502113b36b574b2ebaa2"], &(0x7f00000001c0)=0x2f) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000380)='\x00', 0x1) accept4$ax25(r2, &(0x7f0000000200)={{}, [@bcast, @null, @null, @bcast, @netrom, @null, @netrom, @netrom]}, &(0x7f0000000280)=0x48, 0x80800) [ 1264.942390][ T3252] sp0: Synchronizing with TNC 23:38:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1264.974539][ T3275] ref_ctr_offset mismatch. inode: 0x42ec offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x41) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x6, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc004743e, &(0x7f0000000000)=0xffffffe9) [ 1265.429934][ T3302] debugfs: File '3295' in directory 'proc' already present! 23:38:08 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0xc00) setsockopt$inet_tcp_int(r0, 0x6, 0xa16739e47a148d3e, &(0x7f0000000440)=0xff, 0x4) ioctl$KDENABIO(r0, 0x4b36) r1 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0xffffffffffffe3f}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xb366b0d8753ba5c3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000080)={0x401, 0x2, 'client1\x00', 0xffffffff80000004, "185dbdd6ae82bc2e", "c901bd0a3ad26eea915bf31aff217d31d00a56ffcc4ccda51cfa3b3b6436f240", 0x6, 0x80000000}) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000400)={0x7fffffff, 0x6, 0x9000}, 0x4) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000180)={0x7, 0x7c2}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x6, 0x4}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={r3, 0x47c, 0xfffffffffffffffe}, 0x8) 23:38:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1265.667780][ T3314] binder: 3300:3314 unknown command 1661206528 [ 1265.685163][ T3302] binder: BINDER_SET_CONTEXT_MGR already set 23:38:08 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1265.729841][ T3302] binder: 3295:3302 ioctl 40046207 0 returned -16 [ 1265.814206][ T3314] binder: 3300:3314 ioctl c0306201 20000080 returned -22 [ 1265.841360][ T3312] sp0: Synchronizing with TNC [ 1265.895567][ T3325] binder: 3300:3325 unknown command 1661206528 [ 1265.901776][ T3325] binder: 3300:3325 ioctl c0306201 20000080 returned -22 23:38:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1266.101956][ T3340] ref_ctr_offset mismatch. inode: 0x42ec offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x800, 0x0) open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x7, @local, 0xffffffff}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x2}, @in6={0xa, 0x4e21, 0x7, @local, 0x4}], 0xffffffffffffff75) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/97) 23:38:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc0184900, &(0x7f0000000000)=0xffffffe9) [ 1266.485767][ T3357] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1266.500883][ T3351] debugfs: File '3350' in directory 'proc' already present! 23:38:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1266.615709][ T3357] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 23:38:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x7, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1266.698662][ T3351] debugfs: File '3350' in directory 'proc' already present! [ 1266.801097][ T3361] sp0: Synchronizing with TNC [ 1266.809841][ T3372] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:38:09 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000001c0)=""/24) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="50e10309a9c2e56469e4f5dbb123f0342581153f30df3491bc89a4563c77df53075e86af16ac1e1137ef7f8f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) syncfs(r1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f00000000c0)=""/111) [ 1267.047302][ T3379] binder: 3375:3379 unknown command 73597952 [ 1267.074509][ T3372] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1267.157813][ T3379] binder: 3375:3379 ioctl c0306201 20000080 returned -22 23:38:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1267.293197][ T3361] sp0: Synchronizing with TNC [ 1267.334568][ T3392] binder: 3375:3392 unknown command 73597952 23:38:09 executing program 1: r0 = socket$kcm(0x10, 0x25, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1267.454017][ T3392] binder: 3375:3392 ioctl c0306201 20000080 returned -22 [ 1267.457941][ T3391] debugfs: File '3386' in directory 'proc' already present! [ 1267.484493][ T3398] ref_ctr_offset mismatch. inode: 0x42e9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000000)=0xffffffe9) 23:38:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x1a0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xbd19) 23:38:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) 23:38:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x0, 0x1, 0x2}}, 0x14) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x4}}, 0x20) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@weak_handle={0x77682a85, 0x100a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/24, 0x18, 0x2, 0xf}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 23:38:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc018aa3f, &(0x7f0000000000)=0xffffffe9) 23:38:10 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1268.258052][ T3425] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1268.292424][ T3431] debugfs: File '3428' in directory 'proc' already present! 23:38:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xbd19) 23:38:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x300, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1268.467762][ T3425] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1268.624884][ T3441] ref_ctr_offset mismatch. inode: 0x4076 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1268.648413][ T3438] sp0: Synchronizing with TNC 23:38:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) 23:38:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 23:38:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000000)=0xffffffe9) 23:38:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xbd19) [ 1269.100609][ T3462] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:38:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x500, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1269.235889][ T3459] debugfs: File '3456' in directory 'proc' already present! [ 1269.284454][ T3462] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1269.513599][ T3473] sp0: Synchronizing with TNC 23:38:12 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:12 executing program 1: r0 = socket$kcm(0x10, 0x27, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) 23:38:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x608) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x1ff, 0x5, 0x8001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0463044000000000076300000000d4f65bd273769df2d048240545648833da389b608ae7d125f724f40655b30ec614010000000000000053fdac52f3aa73075cc1ef7ecb369eac08000000000000000840e2f331cabbbd175721f81707f152245d2a435c8390882cbb8f8786ad7cc5a436b08785bc4518f387c58c49943a38a057b2852ff908009532cd04a99d6c2dfb7708761db05ace9b224595497d015a4a3fe8314c8a2fab50cef3e475734ceec3e8398837b2c2cc1b1dbb8f6e28ac3c7bd09577b6bec66d715c54354b261a91e3ece3171bed8003ac36bcfcd28baf8c056acb3b110d37388c138cf22c71a1235253889239a34c86881836839f0f968b5114008a0000"], 0x0, 0x0, 0x0}) 23:38:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xbd19) 23:38:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x600, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc020aa00, &(0x7f0000000000)=0xffffffe9) 23:38:12 executing program 1: r0 = socket$kcm(0x10, 0x27, 0x10) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) [ 1270.046184][ T3495] ref_ctr_offset mismatch. inode: 0x4191 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1270.185237][ T3501] debugfs: File '3500' in directory 'proc' already present! 23:38:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xbd19) 23:38:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x700, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1270.347355][ T3512] sp0: Synchronizing with TNC [ 1270.354641][ T3503] binder: 3500:3503 unknown command 25351 [ 1270.360592][ T3503] binder: 3500:3503 ioctl c0306201 20000080 returned -22 [ 1270.645194][ T3501] binder: 3500:3501 ioctl 402c5639 20000000 returned -22 [ 1270.654915][ T3512] sp0: Synchronizing with TNC 23:38:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x1) fsmount(r1, 0x1, 0x76) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300070000000200009ef88000f01700", 0x2e}], 0x1}, 0x0) 23:38:13 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xffffffffffffffcd, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x4000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc0481273, &(0x7f0000000000)=0xffffffe9) 23:38:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xbd19) [ 1271.125157][ T3547] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1271.133357][ T3547] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1271.424681][ T3556] debugfs: File '3549' in directory 'proc' already present! [ 1271.480471][ T3554] ref_ctr_offset mismatch. inode: 0x41c1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1271.617240][ T3553] sp0: Synchronizing with TNC 23:38:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 23:38:14 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 23:38:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) set_thread_area(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xfffffffeffffffff, 0x5, 0x2, 0x7fffffff, 0x8000, 0x29c2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x1000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc050561a, &(0x7f0000000000)=0xffffffe9) 23:38:14 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1272.243981][ T3591] debugfs: File '3582' in directory 'proc' already present! 23:38:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 23:38:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc0585604, &(0x7f0000000000)=0xffffffe9) 23:38:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x2000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1272.534797][ T3603] ref_ctr_offset mismatch. inode: 0x4371 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) [ 1272.933446][ T3620] debugfs: File '3615' in directory 'proc' already present! 23:38:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x3000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0xc0d05604, &(0x7f0000000000)=0xffffffe9) 23:38:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/11, 0x5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TIOCGETD(r1, 0x540b, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x16) 23:38:15 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056363d8967c3c69d43149"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440000000000763044000435f00"], 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400, 0x0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000100)={0x9, 0x7fff, 0x4, 0x9, 0x4327, 0xfffffffffffffff8, 0xfffffffffffff87d, 0x4, 0x28000000000000, 0x2, 0x1, 0x1c, 0x3, 0x81, &(0x7f0000001040)=""/4096, 0x6, 0x5, 0xfffffffffffffeff}) 23:38:16 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1273.503537][ T3632] binder: BINDER_SET_CONTEXT_MGR already set [ 1273.625397][ T3632] binder: 3631:3632 ioctl 40046207 0 returned -16 [ 1273.662925][ T3647] debugfs: File '3643' in directory 'proc' already present! [ 1273.709775][ T3639] sp0: Synchronizing with TNC 23:38:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000180)={0xfffffffffffff9e6, {{0xa, 0x4e23, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e24, 0x9, @loopback, 0x1c4}}}, 0x108) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x10000) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000300)={0x0, @reserved}) 23:38:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x4000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:16 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1274.211760][ T3666] ref_ctr_offset mismatch. inode: 0x4391 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000180)={0xfffffffffffff9e6, {{0xa, 0x4e23, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e24, 0x9, @loopback, 0x1c4}}}, 0x108) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x10000) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000300)={0x0, @reserved}) [ 1274.415326][ T3674] ref_ctr_offset mismatch. inode: 0x42f5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x5000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1274.467644][ T3675] debugfs: File '3673' in directory 'proc' already present! [ 1274.655376][ T3677] sp0: Synchronizing with TNC 23:38:17 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x424400) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000000c0)={0x0, {0x3, 0x1}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0xffffffffffffff01, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1274.758640][ T3682] sp0: Found TNC 23:38:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000180)={0xfffffffffffff9e6, {{0xa, 0x4e23, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e24, 0x9, @loopback, 0x1c4}}}, 0x108) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x10000) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000300)={0x0, @reserved}) 23:38:17 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x60800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) [ 1275.041549][ T3698] FAULT_INJECTION: forcing a failure. [ 1275.041549][ T3698] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.076384][ T3702] debugfs: File '3700' in directory 'proc' already present! 23:38:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x6000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1275.195810][ T3702] binder: 3700:3702 ioctl c0306201 20000100 returned -14 [ 1275.275753][ T3698] CPU: 0 PID: 3698 Comm: syz-executor.0 Not tainted 5.3.0-rc6+ #122 [ 1275.283793][ T3698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.294206][ T3698] Call Trace: [ 1275.297634][ T3698] dump_stack+0x172/0x1f0 [ 1275.301987][ T3698] should_fail.cold+0xa/0x15 [ 1275.306684][ T3698] ? is_bpf_text_address+0xd3/0x170 [ 1275.312010][ T3698] ? fault_create_debugfs_attr+0x180/0x180 [ 1275.317846][ T3698] ? page_to_nid.part.0+0x20/0x20 [ 1275.322924][ T3698] ? ___might_sleep+0x163/0x280 [ 1275.327801][ T3698] __should_failslab+0x121/0x190 [ 1275.332919][ T3698] should_failslab+0x9/0x14 [ 1275.337568][ T3698] kmem_cache_alloc_trace+0x2d3/0x790 [ 1275.342963][ T3698] ? debug_smp_processor_id+0x3c/0x214 [ 1275.348452][ T3698] alloc_pipe_info+0xb9/0x420 [ 1275.353154][ T3698] ? __might_sleep+0x95/0x190 [ 1275.357853][ T3698] splice_direct_to_actor+0x76b/0x970 [ 1275.363250][ T3698] ? avc_policy_seqno+0xd/0x70 [ 1275.368032][ T3698] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1275.373779][ T3698] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1275.379434][ T3698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1275.385695][ T3698] ? do_splice_to+0x180/0x180 [ 1275.390392][ T3698] ? rw_verify_area+0x126/0x360 [ 1275.395259][ T3698] do_splice_direct+0x1da/0x2a0 [ 1275.400128][ T3698] ? splice_direct_to_actor+0x970/0x970 [ 1275.405936][ T3698] ? __this_cpu_preempt_check+0x3a/0x210 [ 1275.411740][ T3698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1275.418468][ T3698] ? __sb_start_write+0x1e5/0x4e0 [ 1275.423524][ T3698] do_sendfile+0x597/0xd00 [ 1275.427971][ T3698] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1275.433363][ T3698] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1275.439806][ T3698] ? fput+0x1b/0x20 [ 1275.443641][ T3698] __x64_sys_sendfile64+0x1dd/0x220 [ 1275.448863][ T3698] ? switch_fpu_return+0x1fa/0x4f0 [ 1275.454005][ T3698] ? __ia32_sys_sendfile+0x230/0x230 [ 1275.459312][ T3698] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1275.465400][ T3698] ? trace_hardirqs_off_caller+0x65/0x230 [ 1275.471141][ T3698] ? trace_hardirqs_on+0x67/0x240 [ 1275.476195][ T3698] do_syscall_64+0xfd/0x6a0 [ 1275.480810][ T3698] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1275.486751][ T3698] RIP: 0033:0x459879 [ 1275.490670][ T3698] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1275.510302][ T3698] RSP: 002b:00007fd69ef7cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1275.518731][ T3698] RAX: ffffffffffffffda RBX: 00007fd69ef7cc90 RCX: 0000000000459879 [ 1275.526725][ T3698] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1275.534715][ T3698] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1275.542698][ T3698] R10: 000000000000bd19 R11: 0000000000000246 R12: 00007fd69ef7d6d4 [ 1275.550771][ T3698] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 1275.685148][ T3719] sp0: Synchronizing with TNC 23:38:18 executing program 1 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1275.804503][ T3728] sp0: Found TNC 23:38:18 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000001040)=""/4096, 0x1000, 0x1, 0x2b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 23:38:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x7000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1276.024626][ T3719] sp0: Synchronizing with TNC [ 1276.152828][ T3748] ref_ctr_offset mismatch. inode: 0x4191 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1276.205895][ T3759] debugfs: File '3751' in directory 'proc' already present! 23:38:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1276.428095][ T3759] binder: BINDER_SET_CONTEXT_MGR already set 23:38:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x40000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 1276.553398][ T3759] binder: 3751:3759 ioctl 40046207 0 returned -16 23:38:19 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='h%s\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04630440000900000763044000000000ed0f1cd27e6edb6dc8b7f3cf97f35cc509532e27b60c49e00671a63e6b0fefbdc1148325c732d5a935bff7b95357300dc902c2c1a0b995e7dc7b9953f69863eaa7656251d5ded5da02360a70e46344c705ce4b432e754102c12680a6a468200446395577c42e96cff61e40a0a07f0ce394fc4cdff30ec7cb7f257229a8d678b431ecae04fc2222680b4e2482e9a696794c5a00cc2228c7912d403b7486f97c73330a8f7595554333a3770e000de89b177a8b9049e3f89cbf55ee16ded934d9191b266480"], 0x0, 0x0, 0x0}) 23:38:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x2000, 0x0) sendmsg$tipc(r1, &(0x7f0000000580)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="a4d2c6a4f6c02ede52b4fe7b574f529c9782398374e5ea23e174c66d6821c59464d72a279546b30e148a9970c636f637df807eac244914f7774af9a9395a9bbb20a52ffbe4f9d41d3eebdc875eee95cddb9f2fbb1ca5c1b098557d75e312b123cd12faf688d90092fb161eba6e009d686846dec9f649d18ef7f62aed7d7b49d55c4546a845da397a7be0f1de0aa3080e5302da6fdf890662b6fcabb2cbd672f3354fb980308f0feae13a9c316ea4dfa8a689c626364af66d5a457d85372a10296caf69b3bc600c1618aa6f6044e3f45ce5102e409bbc7d0fe97c200bb8984986a00ec80d", 0xe4}, {&(0x7f0000000300)="365722b1ab7ff323fdda8fef95261ab2ca754d007cae9ef3c9b518597b85d000ea78183c0f484a2549a8ce6fbcdb4c9ffe82fc813ca775e9cb6526db8f06ce630ec30ec707512a9b522b8d106586566c4f32c6e554dd3bac04dad7fb5511974a7e6b282b85215cbb4c4e57e547b5c0", 0x6f}, {&(0x7f0000000380)="3badd6d29b4d6f96c944abeca14af6eba4f57488fde7b3acecb2915116f5aa18a631909b521c164d4fd1744977cbf982e41a6cf1cd71d2a027ddb83b212181856b1683f87478c473ab8171aad76e99de93d9445f96ba7bdfedffc39fa5a1eea9f0529d8ea6d60c6ba7798c1ffb0424df0f99cff32fa3b33b171728c30834ade744f0c1e51d2fd6fdde631021f12a2036673fa14d76fb7d634e7a3548cbd2231d8534a7d5301231d4bc0c70039e71cfe919a2", 0xb2}], 0x3, &(0x7f0000000480)="f8df066856f941d487c3a888287188677b92877c064f53c1e91ef0b9706327093bf9ff31af65e7277c1129eca044d680e7033381f72ee5714e38a69712e28bd4cc5e4b26f1d02f2b8576612a58608941601f14fcdc07e39ebe6ab1b705252538e5f2cf4db891d7c52b6ab2125e954d924c8ad71347d705240935b117f7c79289fc97cbfcf5be5d6e42437b8d53c68d889277cf22c1b1103e606c61f375728d415464a3669d176b8806ee5b08bc5611ba888edae4889da0379c04c7aac19d2b0f3f524a716fd6f089fb1b09fc174b3c0500f982bf5d03fd82b08ed823fa64ee2b", 0xe0, 0x1}, 0x8000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9331cbcee334c21f) 23:38:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0xa0010000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1277.091634][ T3790] ref_ctr_offset mismatch. inode: 0x40b6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1277.205595][ T3803] debugfs: File '3796' in directory 'proc' already present! 23:38:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='h\\s\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1277.309646][ T3798] sp0: Synchronizing with TNC 23:38:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0xfdfdffff, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x68ad71d5241c66d8, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffff080000000000000000616173abe3cf90ba3ec46674406bac9b1a38c511bffd1e000100000000ac141422ac1414bbe00000010009dcda6a6f01afb081d9d6ea5d16"], 0x34) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f00000001c0)={0x20, 0x2, 0x6, 0x9, 0x100}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f00000015c0)=[{&(0x7f0000000040)="2300000022008152915a655267030000002ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @mss={0x2, 0x6}, @window={0x3, 0x101, 0x5}, @timestamp], 0x4) 23:38:20 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf#\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x3ff, 0x1}) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) sendfile(r1, r2, 0x0, 0xbd19) [ 1277.875898][ T3835] sp0: Synchronizing with TNC [ 1277.906692][ T3835] sp0: Found TNC 23:38:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0xfffffdfd, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1278.035730][ T3836] ref_ctr_offset mismatch. inode: 0x4131 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x804) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) 23:38:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf%\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1278.205569][ T3843] sp0: Synchronizing with TNC [ 1278.210658][ T3857] sp0: Found TNC [ 1278.362416][ T3872] debugfs: File '3866' in directory 'proc' already present! 23:38:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf*\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x200800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}]}, &(0x7f00000001c0)=0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r1, 0x11816922bf6d4bc5, &(0x7f00000002c0)={{r3, r4+10000000}, {r5, r6+30000000}}, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r2, 0x0, 0x100000001}, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x1a0ffffffff, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:21 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x200) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0xffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0x7, &(0x7f0000000200)=0x1) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x18) setsockopt$packet_buf(r2, 0x107, 0x0, &(0x7f0000000240)="db7885f607ae601712b101040000375bf5c19f4e4d5d0ec58444ddb93e9c1e0356c6fda4119f6f099001d92e7a52652569eadbbdac7b4afbacdf781360c1c7d70f39ee6de96a984d5755cbacb8cd197234a614ba84e4ce24c1635eb00702fd4b6b0b9b2f91c6e2df485b50537e389e4ae559be94c5880325675e8bca030a2fbcbfb7ecbcd829a446c09b", 0x8a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 23:38:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf+\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x100000000000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = dup3(r0, r0, 0x80000) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000040)=0x3) [ 1279.044560][ T3903] debugfs: File '3899' in directory 'proc' already present! [ 1279.074623][ T3902] ref_ctr_offset mismatch. inode: 0x4131 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1279.275840][ T3911] binder: BINDER_SET_CONTEXT_MGR already set [ 1279.368057][ T3911] binder: 3909:3911 ioctl 40046207 0 returned -16 [ 1279.419727][ T3914] sp0: Synchronizing with TNC 23:38:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpusetL\xcb\x9c\xf3%,b\x92\xf5kc\xbds\x80\xde\xccl\xa4\xe3fK\x03\x92C\xfe\xc7J=\x19*5', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "ffd9bca1e8d56b142197669e241e8304"}, 0x11, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000180)={{0x1, 0x2}, 0x0, 0x7, 0x9, {0x2, 0x1ff}, 0x1, 0x4}) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) 23:38:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf-\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x200000000000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x4000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x220400, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000000000000040000000200000000000000000000002000000005000000000000105ccd0a6ffefb38b7336f680000f500000000000000000000e0b80000040000ffff000000000000000000000070ea000000000000000000000000000000000000000000000000000001000000040200d3ae2105a1d42c8da7884e00000000000000000004000000200000000000000000000000000029f231556ff39a9c000000000000c545838a1055f2e64adf598e2638c158ed8f95f73f0de665fd342e94acaa91ee99592b10ba879267670e648f96ba04a44c2ff72fc621addfbdd49024ac76a645c1565d2b05ae086be80bdb1087bbbe62c69d42951d91b1916ddde8b1be06bfe6d4108cc7fee021ca957e0a64ea7a22268790196c9b074e61926f018a6b4999a786f4304f9d881c3abe544339e4"]) r2 = inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x400) inotify_rm_watch(r1, r2) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x20) tee(r0, r0, 0x2, 0x2) 23:38:22 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1279.781652][ T3939] debugfs: File '3938' in directory 'proc' already present! 23:38:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x300000000000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:22 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x400) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x1, "fc0f895174c8c4c9f0fdab1da536758efbe8e174dcfc526cd44c4b89a495b4bdb366f9b3f49fa2a091f9bb63956c183c3f63c26e89456846caee67ca29b17aa3", "638f0f9355ea2c558a50d90b47e5110ef1570537f2fbb84728e7c2116a9884cb", [0x0, 0x5]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd19) [ 1280.044912][ T3957] ref_ctr_offset mismatch. inode: 0x4211 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = dup(r0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x2) 23:38:22 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b19712bcb508aa70", "a8c34ef6de884418f5e40448e8ef56e7", "6eaaa651", "57cc7a5fe228cd5a"}, 0x28) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1280.295946][ T3949] ref_ctr_offset mismatch. inode: 0x4211 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1280.437888][ T3971] debugfs: File '3967' in directory 'proc' already present! [ 1280.477025][ T3969] sp0: Synchronizing with TNC 23:38:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x400000000000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1280.484969][ T3976] sp0: Found TNC 23:38:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.f\x00ilcnt\x00', 0x2, 0x0) socketpair(0x1f, 0x7, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000540)={0x1, 0x40}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x144, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf1c2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}}}}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x38079e3c, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xbe1}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x291}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0xbd19) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000004c0)=0x66084cba, 0x4) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000500), 0x2) write$ppp(r5, &(0x7f0000000400)="d5e40177ac32d425c2ddcadaf47833e9c2d025cdecc7b6d6686b5d8db28cd0b9447998b87223e580b0fa9fb22710afa230e26851be5af071498ff5d00a87ef9238319146a6825b809d30d59dda1560c0884901c4648fc529a37a1e7b34aa67e2b9757cf8cf6c03ab67a79946e5632f9a85d8de26b9c10975b12cd08adc5358d90fa19e9c77430a9ba26c09a49bdef621bcb1b027cf924590af9678ba2ee1da069c59b63559af91ac4126a6d65f914548d077fc67", 0xb4) 23:38:23 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) fstatfs(r1, &(0x7f0000000180)=""/79) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000000c0)={0x80000000, 0x14, [0x5, 0x20, 0x8000, 0x7, 0x7]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1280.989413][ T3969] sp0: Synchronizing with TNC 23:38:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfX\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x500000000000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1281.067527][ T3982] sp0: Found TNC [ 1281.165897][ T4012] debugfs: File '4009' in directory 'proc' already present! 23:38:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@null, @netrom, @null, @netrom, @netrom, @null, @rose, @bcast]}, &(0x7f0000000180)=0x48, 0x80000) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000240)=0x5, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000200)={r3, r4}) r5 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000280)={0x2, 0x4}) sendfile(r1, r5, 0x0, 0xbd19) 23:38:23 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x600000000000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x80) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="070000000800490200040000ca00faff030017d4c9f0ce690000b184ef3bd66014466de465eb552ba04c2e1f1daadc3be504517425ffc076329730ba2070123a4ff0077eae58e6df1e9f00b892d275b5aedfd9a0b09e6e228bdd7e52cca4e0830b5b07f9a841168d6429460ec156188e4447243e5bed774070173d3449932b68f0cd961e330238b50033616e7a685261444e4bbc9c0aca5b20f3de9e79feb163312712e5a4d44e7961239e1d75edc85fac872ce88aeb5add91a36f55f976d9174d9d77400000000000000001856be17ffcd95fa444ff43c6dce2d07896857d74ca79e14ede62f0dedf00"], 0x12) recvmsg(r2, &(0x7f0000000a00)={&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)=""/177, 0xb1}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000680)=""/54, 0x36}, {&(0x7f00000006c0)=""/68, 0x44}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000000780)=""/153, 0x99}], 0xa, &(0x7f0000000900)=""/195, 0xc3}, 0xc7e58cdb7d03a35a) 23:38:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf\\\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x806) r1 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x64, 0x0, &(0x7f0000000280)=[@register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/171, 0xab, 0x1, 0x33}, @fda={0x66646185, 0x4, 0x1, 0x1f}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x3}, @free_buffer={0x40086303, r1}], 0x16, 0x0, &(0x7f0000000300)="5a509c0db187e87eb185f15b1c65f561b32d6927ada7"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="29baec3515840efcd97d5589f55c7e64045dc96f9675d55b16c6b602adf2ecfc397023cd5f433caf9549cf428bba9b19cc102abbabf47a8905ecdd9dcc991fb8020dd72c42f73ffa3ef8f4309f5b68ddf8396176b719f6bab45cb900a1ad31c2e227dafb0fa2c19c9b26e8a8f0784eb17573d3543916b3f27cbe0a5320dc6028062622c7c7469ada5f6bcf9236dbc9b30ad534ad087c690d3acf", @ANYRES64=r2, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYBLOB="54f6904b943f97a6e48a06bb2877a0a3f080d0f1691672be9915dce1e6da4c2b70520f2e62d0d0d5ea5d57c9a3ee99e3b55bb9f55daf4876590224b10106c56c6b1dbb71a9179291fc32bab46a13561b1a3bc7f9d15b8c1ee08d8c4e3b46186433e96eb3f31151aa835e23", @ANYRES16=r1, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX=r0], @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r1], @ANYRESHEX=r1], @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES16=r1, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESHEX, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRESOCT=r1], @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESOCT=r2], @ANYBLOB="fce46600eb5f13ff1c9b33aa929fb77436156ef0ae0c48cc76910688dda1eb766d1c567ab48c4ea466f299a26a309677617c45f6d2a8112f1a346ca4994152de7bdb3fb3c8deab6016b0cd3a67362051bd38fe5750f8204d940b046987119a67211f5993d83ba7d568fcea6f93d9517707a87feca2e99a3b18240be360d7c122d0afd6e13b8b02ef8358ced13af681"]], 0xfffffffffffffdf8, 0x0, 0x0}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x6, 0xfff, 0x2a17}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1281.754576][ T4037] ref_ctr_offset mismatch. inode: 0x408c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:24 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/245, 0xf5}], 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xbd19) 23:38:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x700000000000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:24 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) tkill(r1, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="757365722eaf6465762f70746d7800"]) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x1}) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:24 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1282.119671][ T4060] debugfs: File '4050' in directory 'proc' already present! 23:38:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfc\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1282.285870][ T4067] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.305026][ T4060] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.398285][ T4067] binder: 4063:4067 ioctl 40046207 0 returned -16 [ 1282.405221][ T4060] binder: 4050:4060 ioctl 40046207 0 returned -16 23:38:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgro\x00'/18, 0x200002, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000100)={0x17, 0x8, [0x4, 0x10000, 0x2, 0x16b, 0x4a], 0x5}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) sendfile(r2, r3, 0x0, 0xbd19) [ 1282.445072][ T4078] ref_ctr_offset mismatch. inode: 0x4102 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x4000000000000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/224, 0xe0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="699ec8b4137f7d821a26c3851426ba588d56bcdf5cf57950c4a8e3d520042f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0463041e000000000763044000000000b29925e4f331621ef227948b380a16440e6536dc78c723cbb70179541e346ae9e3ed59b3de5c1059dab878fe46705cd24b0461710537b355355c8b467d0a150567d9a01320e69a70144b26358410f4a587556bd5abfd666af657e613a46311d29c655cf024739b7f1e599d971613255f94b1702e256ebcb6e81721faca8b51f2dec53b1561945e4ef963b2e7db4b24e8f05c47797c480f30ab97581dd59c4672e5835b3e761e03426291d6d5425d120bc27b99d747a7e71166a4c61938c2974f6fc8b26a2fc3faeeaefae0741832362003a887576f9b4c1173c67d"], 0x0, 0x0, 0x0}) [ 1282.676213][ T4069] ref_ctr_offset mismatch. inode: 0x4102 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1282.684149][ T4074] sp0: Synchronizing with TNC 23:38:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfd\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1282.757718][ T4079] sp0: Found TNC 23:38:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0xbd19) [ 1282.951555][ T4098] debugfs: File '4096' in directory 'proc' already present! 23:38:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0xfdfdffff00000000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:25 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1283.070310][ T4098] binder: 4096:4098 unknown command -1261920663 23:38:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) personality(0x4000000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1283.162222][ T4105] binder: 4096:4105 unknown command 503603972 23:38:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfi\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1283.265429][ T4098] binder: 4096:4098 ioctl c0306201 20012000 returned -22 [ 1283.314259][ T4105] binder: 4096:4105 ioctl c0306201 20000080 returned -22 [ 1283.325055][ T4114] ref_ctr_offset mismatch. inode: 0x4102 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x384, 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x4cf052755a51317a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000240)={r2}) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x9ba) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8000, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xbd19) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000080)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x200006, 0x0) [ 1283.447803][ T4120] sp0: Synchronizing with TNC 23:38:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0xffffffffa0010000, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1283.515951][ T4123] sp0: Found TNC 23:38:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @rand_addr=0xfffffffffffffffa}}, 0x101, 0x7}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x20, 0x8000, 0x1, 0x9, 0x6, 0x334e, 0x0, {r3, @in6={{0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, [], 0xa}, 0x75e}}, 0x9, 0x10e, 0x6, 0x4, 0x4}}, &(0x7f0000000300)=0xb0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x8000, 0x0) 23:38:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfl\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1283.727392][ T4123] sp0: Synchronizing with TNC 23:38:26 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1283.838378][ T4152] sp0: Found TNC [ 1283.853816][ T4156] debugfs: File '4155' in directory 'proc' already present! 23:38:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000380)={0x3f}, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e20, 0x400, @dev={0xfe, 0x80, [], 0x2b}, 0x3f}, {0xa, 0x4e24, 0x6, @empty, 0x401}, 0x9, [0x0, 0x5, 0x6, 0x3, 0x1, 0x78d1, 0x4, 0x1000]}, 0x5c) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000040)=0x81, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xda, 0x4}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000340)={r4, 0x0, 0x9}, 0x8) r5 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0xbd19) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4, 0x6, 0x4, 0x4, 0x0, 0xffffffffffffff00, 0x42100, 0x6, 0x7fff, 0x6, 0x4, 0x100, 0x7, 0x57, 0x1ff, 0x4, 0x7ff, 0x7ff, 0x166, 0x13, 0x827, 0x4, 0x200, 0x401, 0x98f, 0xffffffffffff8000, 0x8000, 0x200, 0x7, 0x1, 0x6, 0x0, 0xe1d, 0x8, 0x8001, 0x2, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x5}, 0x4000, 0x1, 0xff, 0x1, 0x25, 0x7fff, 0x7}, r6, 0x6, r3, 0xbdea499d5a70a75b) 23:38:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x630b, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1284.076194][ T4162] ref_ctr_offset mismatch. inode: 0x408c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x12) 23:38:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="046304400000000045dce0cde9b9ac4cd52a70dedc289167a644396558730763044000000010"], 0x0, 0x0, 0x0}) 23:38:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfo\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1284.350686][ T4182] debugfs: File '4181' in directory 'proc' already present! 23:38:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r3, 0x3, &(0x7f0000000040)={&(0x7f0000000180)="4f0edc8d6be8fbaa1bd1a64acf8dc95eb2eda7ffe2edf603c19d0e8c3ed136881d5dff17d0e92c95ccdfd7e65cfe1cc8fad94808777bb55be19874cb58d18258ac0694d2cfd56c41b76d197d42a89b56dc3132a8ae3c52b14a4a77b4cf9c546662ba238d3e8d0a08e37bfa40ae6f1a2693b7da237a4938167230c5704811706c854b6d269dba0d", 0x87}) [ 1284.435940][ T4187] binder: 4180:4187 unknown command 0 [ 1284.452427][ T4182] binder: 4181:4182 unknown command -840901563 [ 1284.475575][ T4187] binder: 4180:4187 ioctl c0306201 20000080 returned -22 [ 1284.544446][ T4182] binder: 4181:4182 ioctl c0306201 20000080 returned -22 23:38:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:27 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1284.641625][ T4196] binder: 4181:4196 unknown command -840901563 23:38:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfp\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:27 executing program 0: r0 = eventfd(0xbd62) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000000)) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd19) flock(r2, 0x2) 23:38:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x630c, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1284.795677][ T4196] binder: 4181:4196 ioctl c0306201 20000080 returned -22 [ 1284.855394][ T4202] ref_ctr_offset mismatch. inode: 0x4121 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x60800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) [ 1285.098568][ T4218] binder: 4216:4218 unknown command 0 23:38:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) socketpair(0x13, 0x5, 0x300000, &(0x7f0000000340)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000300)={'ip6_vti0\x00', 0x4000000000000000}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000380)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000009, r2) rt_sigsuspend(&(0x7f0000000040)={0x2}, 0x8) 23:38:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1285.165331][ T4218] binder: 4216:4218 ioctl c0306201 20000080 returned -22 23:38:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfu\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1285.227350][ T4219] binder: 4216:4219 unknown command 0 [ 1285.334796][ T4222] sp0: Synchronizing with TNC [ 1285.346146][ T4219] binder: 4216:4219 ioctl c0306201 20000080 returned -22 [ 1285.414709][ T4224] sp1: Synchronizing with TNC [ 1285.451022][ T4232] sp0: Found TNC 23:38:28 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x630d, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1285.555538][ T4224] sp1: Found TNC 23:38:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) write$ppp(r1, &(0x7f0000000180)="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", 0x1000) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000001440)=0x9, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xbd19) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="08e4020000734922746cc2ff3bd6376b0c667e6d740702598679b49be8aa19b6af85350045cceaad3d31d96df0bdb2c53bad5c50045e1934f9fd54", @ANYRES16=r3, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 23:38:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfx\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1285.778939][ T4257] binder: 4252:4257 unknown command 0 [ 1285.784891][ T4253] ref_ctr_offset mismatch. inode: 0x40f2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:28 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1285.837639][ T4257] binder: 4252:4257 ioctl c0306201 20000080 returned -22 [ 1285.941176][ T4267] binder: 4252:4267 unknown command 0 23:38:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hf\x10\x01', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1286.046415][ T4244] ref_ctr_offset mismatch. inode: 0x40f2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000180)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000002c0)=""/151, 0x97, 0x1, 0x9, 0x5, 0x0, 0x1ff}, 0x120) sendfile(r1, r2, 0x0, 0xbd19) [ 1286.098852][ T4267] binder: 4252:4267 ioctl c0306201 20000080 returned -22 [ 1286.143890][ T4272] FAULT_INJECTION: forcing a failure. [ 1286.143890][ T4272] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.181429][ T4270] mkiss: ax0: crc mode is auto. [ 1286.219112][ T4237] sp0: Synchronizing with TNC [ 1286.262768][ T4237] sp0: Found TNC [ 1286.366256][ T4272] CPU: 0 PID: 4272 Comm: syz-executor.2 Not tainted 5.3.0-rc6+ #122 [ 1286.374454][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.384688][ T4272] Call Trace: [ 1286.388195][ T4272] dump_stack+0x172/0x1f0 [ 1286.392547][ T4272] should_fail.cold+0xa/0x15 [ 1286.397343][ T4272] ? fault_create_debugfs_attr+0x180/0x180 [ 1286.403167][ T4272] ? lock_downgrade+0x920/0x920 [ 1286.408126][ T4272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1286.414562][ T4272] ? debug_smp_processor_id+0x3c/0x214 [ 1286.420040][ T4272] ? ___might_sleep+0x163/0x280 [ 1286.424916][ T4272] __should_failslab+0x121/0x190 [ 1286.429873][ T4272] should_failslab+0x9/0x14 [ 1286.434391][ T4272] __kmalloc+0x2e0/0x770 [ 1286.438654][ T4272] ? mark_held_locks+0xf0/0xf0 [ 1286.443654][ T4272] ? _parse_integer+0x190/0x190 [ 1286.448519][ T4272] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1286.454560][ T4272] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1286.460131][ T4272] ? tomoyo_path_number_perm+0x193/0x520 23:38:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046302, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1286.465875][ T4272] tomoyo_path_number_perm+0x1dd/0x520 [ 1286.471446][ T4272] ? tomoyo_path_number_perm+0x193/0x520 [ 1286.477104][ T4272] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1286.482928][ T4272] ? perf_trace_lock_acquire+0xf5/0x530 [ 1286.488502][ T4272] ? ___might_sleep+0x163/0x280 [ 1286.493475][ T4272] ? selinux_file_mprotect+0x620/0x620 [ 1286.499025][ T4272] ? __fget+0x384/0x560 [ 1286.503200][ T4272] ? ksys_dup3+0x3e0/0x3e0 [ 1286.507891][ T4272] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1286.514326][ T4272] ? fput_many+0x12c/0x1a0 [ 1286.518774][ T4272] tomoyo_file_ioctl+0x23/0x30 [ 1286.523823][ T4272] security_file_ioctl+0x77/0xc0 [ 1286.528872][ T4272] ksys_ioctl+0x57/0xd0 [ 1286.533051][ T4272] __x64_sys_ioctl+0x73/0xb0 [ 1286.537667][ T4272] do_syscall_64+0xfd/0x6a0 [ 1286.542193][ T4272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.548094][ T4272] RIP: 0033:0x459879 [ 1286.552033][ T4272] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1286.572167][ T4272] RSP: 002b:00007fba55f20c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.580709][ T4272] RAX: ffffffffffffffda RBX: 00007fba55f20c90 RCX: 0000000000459879 [ 1286.588691][ T4272] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1286.596947][ T4272] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1286.608632][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fba55f216d4 23:38:29 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1286.616700][ T4272] R13: 00000000004c41b3 R14: 00000000004d83c8 R15: 0000000000000004 23:38:29 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='/dev/ptmx\x00', 0xfffffffffffffffc) keyctl$instantiate(0xc, r1, &(0x7f00000001c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '/dev/dlm-control\x00'}, 0x27, r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000340)={@rand_addr=0x5, @dev={0xac, 0x14, 0x14, 0xb}, r4}, 0xc) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x8001001, 0x6, 0x3}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x02', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1286.764588][ T4301] binder: BC_ACQUIRE_RESULT not supported 23:38:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800, 0x105000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000300)="b25b0d8cef4d2a3fb492f4d813205a58", 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x95a3aaecd8c9ba70, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0xbd19) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) [ 1286.844174][ T4301] binder: 4292:4301 ioctl c0306201 20000080 returned -22 [ 1286.988225][ T4301] binder: BINDER_SET_CONTEXT_MGR already set [ 1286.992233][ T4314] binder: BC_ACQUIRE_RESULT not supported [ 1287.026272][ T4314] binder: 4292:4314 ioctl c0306201 20000080 returned -22 [ 1287.057603][ T4308] sp0: Synchronizing with TNC [ 1287.119655][ T4301] binder: 4292:4301 ioctl 40046207 0 returned -16 [ 1287.127414][ T4319] ref_ctr_offset mismatch. inode: 0x4272 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1287.132253][ T4318] sp0: Found TNC 23:38:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x03', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='\x99\xc2\x80\xd9F\xe5\x00\xe8\xbf\x86<\x17\xdb\xe8VR\x7f\xa9\x1a\xd5~K\x05\xda\xc0F\x8e\xdb\xc0\\\x1bv\xd5[xt\xe7\xb8|\xa3\x12Y\xc3\xbb\x13i\x91\xcd!x6D\xa2\xe5\t\xa8,\xf3\xb0\xf9\xfa\x87<\xafzQ\xe4\x12~\x16\xf4Z\x1a\x99\xba\xb6\xfb\xc6e\xa1\xcb\xc9\xef\xb9\"\xcc $\xa2\xa6\xc0\x01\xd0\x94\x95\x02\xda\x8a\x97\x1d\xac\x86\x18\xcd\x98\xd8\xc8\xf9M$7\xa8\xact\xbc&\x1b^/\x8e\xcb\xe7\x84\xe9@A\xddYE\x11\xa9\x87\a!\xfa\xa5\xa3\xb2\x13u\xe7\xaf\xf5Z\x17\x8fq\x93\xa8\xbd\x18;\x883Y)\x8d\xd5\xe6\xf4\xd8\x8a\xbc', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000000)=0xb0b) 23:38:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046303, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1287.414855][ T4318] sp0: Synchronizing with TNC [ 1287.418461][ T4272] ERROR: Out of memory at tomoyo_realpath_from_path. 23:38:30 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe603}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1287.710867][ T4346] binder: 4342:4346 unknown command 1074029315 23:38:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:38:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='.+cg\x00-\x18\xddu\xc3\x06\xdeZ\xb3\x96B\xa9Y\xbc\xae\xec\xb3\xcb\xc9\xbe\x97=\xee\xafBB>\xdd\x95\r\xa6\xeaTp~P\xb5p*C,\xd6\x1ft4\x94j\x84\xf8\x101|\"0 \xd3\x16\xbb\x90du\x9b;\x87\xfb\x85\x01\xb5\x01\xb1\x93\xe2\xe77\x84\xe0]\x87\xfb\x8b\xf9M!\xac\x97\xf5\x8c\xed(}q]d\xa6\x15>\xdf6\xa2\xb8\xf9\xbf\xd6@Q\x1f\x96\x148\xc9\r\xe7\x1a0m', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000000bd19) 23:38:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x04', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0xffffffe9) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000140)=0x14) [ 1287.839427][ T4346] binder: 4342:4346 ioctl c0306201 20000080 returned -22 [ 1288.028633][ T4367] binder: 4342:4367 unknown command 1074029315 [ 1288.037083][ T4362] ref_ctr_offset mismatch. inode: 0x4191 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1288.143053][ T4366] mkiss: ax0: crc mode is auto. 23:38:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x05', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1288.168742][ T4367] binder: 4342:4367 ioctl c0306201 20000080 returned -22 23:38:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x7) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd19) [ 1288.335026][ T4373] sp0: Synchronizing with TNC 23:38:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046305, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1288.426820][ T4374] sp0: Found TNC 23:38:31 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400040, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x121000, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000180)) 23:38:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x06', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046306, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1289.039578][ T4405] ref_ctr_offset mismatch. inode: 0x4191 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1290.685380][ T21] device bridge_slave_1 left promiscuous mode [ 1290.691707][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.814811][ T21] device bridge_slave_0 left promiscuous mode [ 1290.852049][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.325283][ T21] device hsr_slave_0 left promiscuous mode [ 1291.357507][ T21] device hsr_slave_1 left promiscuous mode [ 1291.523523][ T21] team0 (unregistering): Port device team_slave_1 removed [ 1291.634985][ T21] team0 (unregistering): Port device team_slave_0 removed [ 1291.733903][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.887428][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.100691][ T21] bond0 (unregistering): Released all slaves [ 1293.254202][ T4453] IPVS: ftp: loaded support on port[0] = 21 [ 1293.307120][ T4453] chnl_net:caif_netlink_parms(): no params data found [ 1293.331810][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.339243][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.346941][ T4453] device bridge_slave_0 entered promiscuous mode [ 1293.354745][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.361968][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.370273][ T4453] device bridge_slave_1 entered promiscuous mode [ 1293.384979][ T4453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.396331][ T4453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.412846][ T4453] team0: Port device team_slave_0 added [ 1293.420157][ T4453] team0: Port device team_slave_1 added [ 1293.476021][ T4453] device hsr_slave_0 entered promiscuous mode [ 1293.534475][ T4453] device hsr_slave_1 entered promiscuous mode [ 1293.574230][ T4453] debugfs: Directory 'hsr0' with parent '/' already present! [ 1293.588963][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.596074][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.603469][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.610594][ T4453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.639418][ T4453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.651474][T27705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1293.659976][T27705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.677953][T27705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.686813][T27705] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1293.697875][ T4453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.709294][T27629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1293.718379][T27629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.725740][T27629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.744900][T27629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1293.753455][T27629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.760732][T27629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.769510][T27629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1293.778228][T27629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1293.789364][T27629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1293.797374][T27629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.809115][ T4453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.820307][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.828187][T27629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1293.847431][ T4453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.908656][ T4462] mkiss: ax0: crc mode is auto. 23:38:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000)) 23:38:36 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xbd19) 23:38:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\a', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:36 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046307, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x106) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x4000}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendfile(r2, r3, 0x0, 0xbd19) setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x1, 0xffff}]}, 0xc, 0x1) 23:38:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x4004630c, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f0000000100), 0x5d1cd4a4dbcc9e8a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x10', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1294.150858][ T4487] ref_ctr_offset mismatch. inode: 0x4171 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1294.214772][ T4490] mkiss: ax0: crc mode is auto. [ 1294.222822][ T4499] binder: 4494:4499 unknown command 1074029324 [ 1294.278288][ T4499] binder: 4494:4499 ioctl c0306201 20000080 returned -22 [ 1294.331186][ T4490] mkiss: ax0: crc mode is auto. [ 1294.337176][ T4512] binder: 4494:4512 unknown command 1074029324 23:38:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101040, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x4}, @mss={0x2, 0x7a}, @mss={0x2, 0x10001}, @sack_perm, @sack_perm, @mss={0x2, 0x1}, @window={0x3, 0xab4, 0x81}, @timestamp, @timestamp], 0x9) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd19) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000180)={0xff, 0x0, [], {0x0, @reserved}}) 23:38:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x14000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1294.393636][ T4512] binder: 4494:4512 ioctl c0306201 20000080 returned -22 23:38:37 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\xa0', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x10, &(0x7f0000000000)) 23:38:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046312, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000140)="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") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = syz_open_dev$audion(&(0x7f0000001200)='/dev/audio#\x00', 0x712, 0x0) connect$llc(r1, &(0x7f0000001240)={0x1a, 0x323, 0x5, 0xe8e, 0x8, 0x6}, 0x10) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000001140)=@sha1={0x1, "13c7bb793e224dcc22b97890b6ae282ba0666e60"}, 0x15, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind(r2, &(0x7f0000001180)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000200)='memory.swap.max\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}]}) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xbd19) [ 1294.770429][ T4548] binder: 4547:4548 unknown command 1074029330 [ 1294.779961][ T4544] mkiss: ax0: crc mode is auto. [ 1294.834813][ T4546] ref_ctr_offset mismatch. inode: 0x41e1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1294.847483][ T4548] binder: 4547:4548 ioctl c0306201 20000080 returned -22 [ 1294.935908][ T4553] sp0: Synchronizing with TNC [ 1294.980689][ T4544] mkiss: ax0: crc mode is auto. [ 1294.996968][ T26] audit: type=1400 audit(1567381117.561:126): avc: denied { bind } for pid=4552 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1295.022243][ T4567] binder: 4547:4567 unknown command 1074029330 [ 1295.036197][ T4553] sp0: Found TNC 23:38:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x80', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1295.127773][ T4567] binder: 4547:4567 ioctl c0306201 20000080 returned -22 23:38:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40086303, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:37 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1295.322557][ T4565] sp0: Synchronizing with TNC 23:38:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4b31, &(0x7f0000000000)) [ 1295.405611][ T4598] sp0: Found TNC 23:38:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1295.546659][ T4604] binder: 4603:4604 unknown command 0 [ 1295.554272][ T4607] ref_ctr_offset mismatch. inode: 0x4152 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1295.646140][ T4604] binder: 4603:4604 ioctl c0306201 20000080 returned -22 [ 1295.743754][ T4616] mkiss: ax0: crc mode is auto. [ 1295.774796][ T4609] binder: 4603:4609 unknown command 0 23:38:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00\x90o&nP1\xe4\x90+\x04\x11\x96<\x9c\x93U.l+\x10(Q\x99\xfe\xc5Xx\x1b\x1d5\x88\xad\xd9\x17[\xcb\xbf\xd1\xd6\xe4\xd8l\x11\x05,?ok\x84u\xd5\r2~\x8dF\xf8\xf5!\xbd\xecI\x00\xe9\xbc\xcd6\xbb[\x15p\xe8\xa2MW\x8a\x01\xd8\x13\x81\xa65\xb8?QS\xce/\xed~\xaf7ca\x8e\xc7\x97[\b\x7f\xee\xe3\xc7\x94R\x0e\x9a\x05\f\xe7\x99\xe9*D\\q\xe0t\xfcU\x92\x81\xcb\x16\x8f', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x2, 0x4000) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x82040, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000400)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x181000, 0x0) r3 = accept$packet(r2, &(0x7f0000000500), &(0x7f0000000580)=0xff7b) r4 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@hci={0x1f, 0x0}, &(0x7f0000000080)=0x80, 0x0) bind$packet(r3, &(0x7f0000000140)={0x11, 0x6, r5, 0x1, 0xaca}, 0x14) r6 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @remote}, {0x306, @random="68d9865f5ca0"}, 0x4, {0x2, 0x4e20, @multicast1}, 'hwsim0\x00'}) r7 = getpgid(0x0) fcntl$lock(r2, 0x5, &(0x7f0000000380)={0x0, 0x0, 0xa5, 0x0, r7}) socket$inet_udplite(0x2, 0x2, 0x88) bind$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x0, @reserved}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r6, 0x0, 0xd, &(0x7f0000000300)='./cgroup.cpu\x00'}, 0x30) fcntl$getownex(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0}) tgkill(r8, r9, 0x2) sendfile(r3, r0, 0x0, 0x7) [ 1295.937954][ T4609] binder: 4603:4609 ioctl c0306201 20000080 returned -22 23:38:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1296.051542][ T4630] sp0: Synchronizing with TNC 23:38:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4b40, &(0x7f0000000000)) [ 1296.194777][ T4635] sp0: Found TNC 23:38:38 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x4008630a, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x50000, 0x0) [ 1296.545470][ T4630] sp0: Synchronizing with TNC [ 1296.565580][ T4654] ref_ctr_offset mismatch. inode: 0x4152 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1296.679729][ T4657] mkiss: ax0: crc mode is auto. [ 1296.765727][ T4671] binder: BC_ATTEMPT_ACQUIRE not supported [ 1296.897117][ T4671] binder: 4663:4671 ioctl c0306201 20000080 returned -22 23:38:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x9) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x24000000, 0x7, 0x37}) 23:38:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0xfff, 0x4, 0x3, 0x3, 0xfffffffffffffffb}) [ 1297.045669][ T4688] binder: BC_ATTEMPT_ACQUIRE not supported [ 1297.051675][ T4688] binder: 4663:4688 ioctl c0306201 20000080 returned -22 23:38:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x01', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4b47, &(0x7f0000000000)) 23:38:39 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1297.811688][ T4711] mkiss: ax0: crc mode is auto. 23:38:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:40 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40086310, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x4, 0x6, 0x40, 0x1000, 0x8, 0x20}) 23:38:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x04', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1298.404949][ T4740] ref_ctr_offset mismatch. inode: 0x42d1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1298.446910][ T4738] sp0: Synchronizing with TNC 23:38:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000000)) [ 1298.487164][ T4743] binder: 4733:4743 unknown command 0 [ 1298.594111][ T4743] binder: 4733:4743 ioctl c0306201 20000080 returned -22 [ 1298.624202][ T4741] sp0: Found TNC [ 1298.770715][ T4755] binder: 4733:4755 unknown command 0 [ 1298.869346][ T4741] sp0: Synchronizing with TNC [ 1298.901411][ T4755] binder: 4733:4755 ioctl c0306201 20000080 returned -22 23:38:41 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x1fb240) ioctl$KDSETMODE(r0, 0x4b3a, 0x3) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0xffff, 0x77775f57, 0x7, 0x1, 0x3, @discrete={0x3, 0x10000}}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xbd19) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x2, {0x800}}, 0x18) [ 1299.109354][ T4763] mkiss: ax0: crc mode is auto. 23:38:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630e, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4b68, &(0x7f0000000000)) [ 1299.828680][ T4793] sp0: Synchronizing with TNC 23:38:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) recvfrom(r2, &(0x7f0000000180)=""/155, 0x9b, 0x2000, &(0x7f0000000040)=@ethernet={0x6, @broadcast}, 0x80) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) sendfile(r1, r4, 0x0, 0xbd19) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x0, 0x1e24}, @timestamp, @mss={0x2, 0x401}, @timestamp, @window={0x3, 0x0, 0x1}, @sack_perm, @window={0x3, 0x101, 0x7fff}, @sack_perm], 0x8) openat$cgroup_subtree(r4, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) [ 1299.976693][ T4797] sp0: Found TNC 23:38:42 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1300.061902][ T4793] sp0: Synchronizing with TNC [ 1300.250117][ T4797] sp0: Found TNC 23:38:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4c00, &(0x7f0000000000)) 23:38:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40106308, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1300.754441][ T4824] ref_ctr_offset mismatch. inode: 0x4328 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x400000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040), 0x2) sendfile(r1, r2, 0x0, 0xbd19) 23:38:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4c01, &(0x7f0000000000)) [ 1301.210887][ T4848] sp0: Synchronizing with TNC [ 1301.344876][ T4859] binder: BINDER_SET_CONTEXT_MGR already set [ 1301.366086][ T4853] sp0: Found TNC 23:38:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1301.450530][ T4859] binder: 4849:4859 ioctl 40046207 0 returned -16 23:38:44 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x8c000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xe3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0xa8d2b7550efba0e1) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xbd19) [ 1301.870221][ T4853] sp0: Synchronizing with TNC 23:38:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40106309, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1301.985897][ T4881] ref_ctr_offset mismatch. inode: 0x4320 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5401, &(0x7f0000000000)) 23:38:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2007) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:45 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = dup2(r0, r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2}, @acquire={0x40046305, 0x2}], 0xaa, 0x0, &(0x7f0000000180)="33e9c0c550895317aa6ad988a6651338b65d6616dd1a46e3da4eed2c830eb9e14a13a79e5c645fbf65da1cb941d64377ecd1f1e7daeef42bf558d6f1a8cae18606a735275214ca24a6e8b8546a80d33607f3a700f63f3f03a479e79518577aa7e8afecfa7171d531522d01285bf24fcca91cbd38e72cebc51a2f547c046de43f07b45e476414dd14cf64136fba60fb42d530c19d4d0e3f85f812b287b0323fc0c4f2670ab78b91783b4f"}) sendfile(r2, r3, 0x0, 0xbd19) 23:38:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40406300, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1302.767201][ T4874] ref_ctr_offset mismatch. inode: 0x4320 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1302.842165][ T4908] mkiss: ax0: crc mode is auto. 23:38:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000140)={r2, 0x3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xbd19) 23:38:46 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40406301, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000000)) 23:38:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1304.048383][ T4944] sp0: Synchronizing with TNC [ 1304.053289][ T4956] sp0: Found TNC [ 1304.147204][ T4962] ref_ctr_offset mismatch. inode: 0x432f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1304.282775][ T4960] mkiss: ax0: crc mode is auto. 23:38:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00\x00\x00\x00\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) getpgrp(0xffffffffffffffff) r3 = fcntl$getown(r1, 0x9) r4 = getpgid(r3) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=r4) 23:38:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40486311, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0xb9, 0xc8, 0x9, "2e37f9d2a6a8b848ca5a66a59de2f9d23a456576c3c94711855215d021334e8af0576014bd30dc2590a7425db7184b348f869f7256ac529f972df5cd1ef2c46abfdd5b9079def1637aec6721ea124003c8e9ecec36c495925c53e52defc509db90276c1fb64e23a39f6cc2b23e3e18a4bd384db0bbb78dba2a36e7e311ad6be48b44cccc18ef86f975582bf05dd60b0795eda7891e35c698b09cd8258196a35fa55489a9a79183b1c9cab9b6d01463ab5b1daa8032b6f4d54a"}) 23:38:47 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2630feff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000000)) 23:38:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000000)=0x9, 0x4) [ 1305.303352][ T5004] ref_ctr_offset mismatch. inode: 0x4335 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x15) 23:38:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40486312, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1305.668956][ T5011] mkiss: ax0: crc mode is auto. 23:38:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x20) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xbd19) 23:38:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x2, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x5, 0x5000}) 23:38:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000000)) 23:38:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:49 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:38:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000000)) 23:38:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x3, 0x40046304}], 0x0, 0x0, 0x0}) [ 1307.072900][ T5052] sp0: Synchronizing with TNC [ 1307.150120][ T5064] sp0: Found TNC [ 1307.224331][ T5069] ref_ctr_offset mismatch. inode: 0x40f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:50 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r2, r0], 0x2) sendfile(r1, r2, 0x0, 0xbd19) 23:38:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000080)=0x2e, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0xffffffe9) 23:38:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\xff', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x4, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000000)) [ 1308.033610][ T5096] sp0: Synchronizing with TNC 23:38:50 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1308.126303][ T5108] sp0: Found TNC [ 1308.164978][ T5102] mkiss: ax0: crc mode is auto. 23:38:50 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1d) sendfile(r1, r1, 0x0, 0xbd19) recvfrom$inet(r1, &(0x7f0000000000)=""/65, 0x41, 0x2001, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 23:38:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\xff', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1308.449307][ T5124] ref_ctr_offset mismatch. inode: 0x408b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1308.472176][ T5096] sp0: Synchronizing with TNC [ 1308.585998][ T5108] sp0: Found TNC 23:38:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x5, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000000)) 23:38:51 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001c0000003fffffff03000000010000000000000e020000000000000000000000000000060400000000610014d7bdba8c847ec822c1254135266aa466ad3d96a3e006b1347f6498135e3fdaa2ead6d824af34d32d419649f868fec123e3622113249ab514936963cb67c0a1a311bfa1aef05e67c140031e38ef09cf02007a73e8ddc25f8f8343bbcfcb1213a3502ee590c8fc2e744242e537d70dad5f6899e4ec01"], 0x0, 0x37, 0xfffffffffffffe53}, 0x20) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101400, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000180)=0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/39) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='notify_on_release\x00', 0x2, 0x0) ioctl$TIOCCBRK(r1, 0x5428) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x2f0c4717}, 0xb) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd19) 23:38:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x6, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\xfc', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = socket(0x5, 0x5, 0x400) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @initdev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@dev, @remote, 0x0}, &(0x7f0000000300)=0xc) getsockname(0xffffffffffffffff, &(0x7f0000000340)=@hci={0x1f, 0x0}, &(0x7f00000003c0)=0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000400)={@dev, 0x0}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000003f00)={@multicast1, @broadcast, 0x0}, &(0x7f0000003f40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f80)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004080)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000040c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004100)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004300)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000004400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004440)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005b40)={0x0, @loopback, @local}, &(0x7f0000005b80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005bc0)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000005cc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005dc0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000005ec0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000005f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005f40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000005f80)={@loopback, 0x0}, &(0x7f0000005fc0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000006000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006040)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006080)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000006180)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000061c0)={@multicast1, @dev, 0x0}, &(0x7f0000006200)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000063c0)={@rand_addr, 0x0}, &(0x7f0000006400)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006440)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000006540)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000006580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000065c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006600)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000006700)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000006800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006840)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000009380)={@remote, 0x0}, &(0x7f00000093c0)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000009b80)={&(0x7f0000009400)={0x744, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x9, 0x7, 0x1ff, 0x1}, {0x1, 0x8001, 0x2, 0x2b16}]}}}]}}, {{0x8, 0x1, r4}, {0xc0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x224, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x4}}, {{0x8, 0x1, r16}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x864a}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x7c, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x200, 0x100000000, 0x8, 0x4}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r21}, {0x90, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x17c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff0001}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x744}, 0x1, 0x0, 0x0, 0x1}, 0x1) 23:38:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000000)) 23:38:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x3ff, 0x10000}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x4c, 0x200, 0x3}, &(0x7f0000000180)=0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0xf85f8f31bd35d6cf, 0x0) 23:38:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x7, 0x40046304}], 0x0, 0x0, 0x0}) [ 1309.967586][ T5178] sp0: Synchronizing with TNC [ 1310.164921][ T5187] sp0: Found TNC 23:38:52 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\xfe', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000000)) 23:38:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x1a0, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd19) [ 1310.729554][ T5178] sp0: Synchronizing with TNC [ 1310.775663][ T5187] sp0: Found TNC [ 1310.789041][ T5210] ref_ctr_offset mismatch. inode: 0x4291 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\xff', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:53 executing program 3: getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="f80a4360aa3a2e96fcdd03c2ffc8343f3d1a3c1288e3483cc8da3d0c2c932801ba") 23:38:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x300, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x20}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 23:38:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000000)) 23:38:54 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x500, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000200)={0xffffffffffffff00, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001a80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001ac0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000001bc0)=0xe8) fstat(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001cc0)={0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f0000001c80)='/dev/vcs\x00'}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000001e00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001e40)={0x0, 0x0, 0x0}, &(0x7f0000001e80)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002040)={0x0}, &(0x7f0000002080)=0xc) stat(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000002180)=[0xee01, 0x0, 0xffffffffffffffff, 0xee01]) r11 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000021c0)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000022c0)=0xe8) r13 = getegid() r14 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000023c0)=0x0) getresuid(&(0x7f0000002400)=0x0, &(0x7f0000002440), &(0x7f0000002480)) r19 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002500)={0x0, r1, 0x0, 0x16, &(0x7f00000024c0)='em0em0mime_typecgroup\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000030c0)=0x0) r24 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003100)={0x0, 0x0, 0x0}, &(0x7f0000003140)=0xc) r26 = gettid() r27 = getuid() getgroups(0x2, &(0x7f0000003180)=[0x0, 0xee01]) r29 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000031c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f00000032c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003300)={0x0, 0x0, 0x0}, &(0x7f0000003340)=0xc) r32 = accept4$ax25(r1, &(0x7f0000004800)={{0x3, @bcast}, [@remote, @rose, @netrom, @rose, @netrom, @netrom, @remote, @rose]}, &(0x7f0000004880)=0x48, 0x800) r33 = fcntl$getown(r0, 0x9) fstat(r0, &(0x7f0000004e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r35 = getgid() r36 = fcntl$getown(r1, 0x9) r37 = getuid() r38 = getegid() r39 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004f00)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000005000)=0xe8) lstat(&(0x7f0000005040)='./file0\x00', &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r42 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005100)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000005200)=0xe8) stat(&(0x7f0000005240)='./file0\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000005740)={0x0, 0x0, 0x0, 0x0, 0x0}) r46 = getegid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000057c0)=0x0) r48 = getuid() getgroups(0x7, &(0x7f0000005800)=[0xee01, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005840)={0x0}, &(0x7f0000005880)=0xc) r51 = geteuid() r52 = getegid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000058c0)=0x0) lstat(&(0x7f0000005900)='./file0\x00', &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000059c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000005a40)=0x0) r57 = geteuid() stat(&(0x7f0000005a80)='./file0\x00', &(0x7f0000005ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000007e00)=0x0) r60 = geteuid() getgroups(0x3, &(0x7f0000007e40)=[0x0, 0xee00, 0xee00]) r62 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000007e80)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000007f80)=0xe8) r64 = getegid() r65 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000007fc0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast2}}, &(0x7f00000080c0)=0xe8) getresgid(&(0x7f0000008100)=0x0, &(0x7f0000008140), &(0x7f0000008180)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000081c0)=0x0) lstat(&(0x7f0000008200)='./file0\x00', &(0x7f0000008240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000082c0)={0x0, 0x0, 0x0}, &(0x7f0000008300)=0xc) r71 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000008340)='/proc/self\x00', 0x8c1a8081f95cdb15, 0x0) sendmmsg$unix(r1, &(0x7f0000008440)=[{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)="36b44a525082da72b4520c05c7f6b96e52a72172bbf80361af539497fb0e4f47fe7249d23e09f8e910160ef9e49baf54fdf915ff094f188bcd0e91efcf74c4c0168ee0eb6e10f0d163998be2f2772cc688d3a800449c", 0x56}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="717f8dcaa694ed133ad0c56041c7c64a390a0acb0085ed0010075815d5f5043dea7f23287455005d21c80a86b7fdbaf618f869133c1aa8f99e8e6ff0f2190f2bcc6abbc57701355d316e05ae8b25b84bb8672da67b552b4308e32a52455e59114e35ea877bbc42481d7df8f71f4c605395b294ae6ca5007f28872a712c6c365178c6e9599a1810eccc44855b1eb237cfc6cdb0913a7c5157690791f8113d487c0d7a7db74f9b69fa4232c4e0fd685ac89a69c57ae100814cd19e2adb676cbea4a80d97c3bc8aebce90b8744fdcab3dc7d6a04f10a391340fd816db995b6b33a56de89bcfcf2ea8e971487a", 0xeb}, {&(0x7f0000001440)="df5b8c1638c3ba029feb2162c61b9cfbbde34c2d06d378f6396368c5d46b2c4cc53117e6af9b7124e5b765b82faf387e181ec3db9c00af6484982fdf1a44290625a42d076659884c9791640f00642dc782a61e61cc34f97f5102ee9538a74586b5137f9bc4f9da866421b34242b50ef47505e2ac9a0178ccfee457399b1e3f951e767ce03b126dbf19a98bd47cc4b4dab130d0515b8aeca52f213aef0c11dd8ce912baecb1f234", 0xa7}, {&(0x7f0000001500)="3aefd11d2772af6841192d6cbc0edefa56f7cd67ca83926564609d14bd29ea6dbfd280fe59d44aec4a6196808c84d411231348561b7958fa0358a34cc3e2c4a364d74317c311b2547d7cf65484aa263f69f15918de6a1283fa23fc2580e7f75e018f133aee694e704458186c19094f2b3cc77bbf7cc95cdb4742b75b9ed82213246dbc3a43fb4eee541521a7b865f6e1cb90bfc7f03f9eb82bdb766f9e7735159db61ba38942610ae8f03e74e9c447edc43675df49bb3e21904747eca67a3e4dbb5e05ec26ff7126930d666b", 0xcc}, {&(0x7f0000001600)="9ef179a2847dd53eaf0fec789a8666cd0febaf4f701344d209f69f09af686d1d3b71965a34c16fd0c9283a6498a4959eceafaae0fe2aecb7b57d76b228f369dcfc3a3f9d5c43e0bd67cf6fbfa9c1e852e7dd804a13c62394e19b4fe818d0007208eab8c9a04bba28e09fdf1002258d03fd994e8575c252cbd0c1ecb23e65d4ce91e7ea3361c9fbe078222d0e31d1d5019047fae96b5627e61f", 0x99}, {&(0x7f00000016c0)="4cc1e9e23a91c57010a24831e9d909d3fa6d9a5620c967a3e22c3a6e04e8de0574e589a6b3cb99bd98e681c2258ea325c539ec75cff8a62a1a3323e40ba1c6ab459d4761a65e18bc284a699dee2121b3f97788b068508b5212db079f8b4f971bc0e2e0dea71290ca3138eb31890d42a8d790747fff572029db0296f3028aaced27fe0bfefcee06f4787738e9ff105cf891fc00ff814a72fa88fc4316ef2bf56e5d18f6988c63e8522684e000365141708daf578a8f3f7df5ac50b8e5a01469703875c0cca921789e89a8e59a10c2d66155d8eaa9fedc677c7e7a", 0xda}, {&(0x7f00000017c0)="31fb6afca755ae3eeda55f6301ac6486bd72dfe6bd30a00980b9075ad4786322914f9acb3fafd057881562b4eee88d4b809a8c9776ac57a10d12c4c9e5ed357b4b6f8a607e41ac7a3412bdbe5c8535725d8c2bc956aa2d0b8a0fb080aa99d540a285f8a9705f2cdec052bf098545a7df2e9eec2c2d95a662367152aa9199d9e147398ecd03c6b4ed30cb4bcedc37e2e6cd06f2b99804f30214ceca0e2c87d9859f2eea613c86554a8f16e8191ba14f1fde001c8c9f33219cb30aaa7dbad843d2f04fd0e25543edc4b8c05244443a65a63672e215d8564453eb69d47825f6079343b7adfe5548f57c09e20173818f68f58d8c04f79f42cfb859", 0xf9}, {&(0x7f00000018c0)="ce7bee90b0cb85cac3f5251b94379c3eed4bc5123396930e9246235ee9cda38a50b861e1fc709bd34f992ddb481e154b3b91e0339151f95cb39197add8d22828d883c9289a69b35c98e8b44259d7b210830dcdd55b5b71b0ee823f45c8ba8780102755f65f0fcb909d243b15f5be71797c8a12f86db0b6ca7f71f073d8aabd15316b65a45709eaae160fd03727a682f5f3c282b3eb1b34fb6859e77d54d3ae77094b3ccbc5d37ad7433fb8bf9cd167b08fef", 0xb2}, {&(0x7f0000001980)="c4f4234eb1564ef0b9311c3d00acf0e58a46b9d300da7fb46f32f4e657c764f3a449486a06ac3e4f0a", 0x29}], 0xa, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x40, 0x8000}, {&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001f80)="d00e72948bfffcbe8b4642e691a9d6552c0c6d06ffd0c55719059dc12ceb271d892c75ae12693ef588c03e2dbccefd1945f2dfaca448087bf67a4fc978883a5eacfdbeb7e53fe3a1605a6db1dd49ec6f67e2283ecd22767cb33d14d3", 0x5c}], 0x1, &(0x7f0000002680)=[@rights={{0x34, 0x1, 0x1, [r1, r0, r1, r1, r1, r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r0]}}], 0x140, 0x800}, {&(0x7f00000027c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002840)="fcfcf375b0fe9a2894266b357c5a9bd61891a33252351ca823803bf5bd85410040c6ce9b5c5d9dffa4eceed673ed68c15dc4f422c68936e47980cc831fb18ab673fc0d871173242bd27ddaa5f59d47b1b812e2faa1f9906836074f0b82a856e38c5f53b741a606e437e49c7d1a170f9094a18ad952497afa3977da5510a3ee62fb5eb1fa01927d0f9806f6b972f6d639030e1ee8999ce8c295afac83ffa062748a2817719f86bb1ef80ede27da6df3650e5ebbc2", 0xb4}, {&(0x7f0000002900)}, {&(0x7f0000002940)="fcc7f1abf8e2117114e2c7fcf0eeb4079145f7dceb0988de9647b2c389db8a0fda1432af42e7eeb71cbe30407a17804f3c1f4b5b71b5a54a4c7409c7b04180b082b0c3c92419a68171a9c452e64f0d7d867b2f9f59e10a2808617bb0ce5f80ae2b09f7a945c3f4a1be18e0659e5b9eac4179237a533f1a86b9ae4800a5a67a9b663e9feb76a2200ac2b2daacc81985dada3a35fdfb7626dbde36c6de969aa785bbef7911", 0xa4}, {&(0x7f0000002a00)="c30f20b83b5180050689bf56c477a2369da9b8e7909428529b67160d31b7bf544a036fb82dd94db1aec654b72194f67cc0ec71331131ff81e41515ac50007112b3734c", 0x43}, {&(0x7f0000002a80)="17ce6179953c11c6103852bd544ebfc97c6bc4d2a746b1d079b1e7041457f95174418ada2101e37461adb4aa426c324baf7967cd49cc270cccdb8db17df22326749256112492f09f5e9b08d78ea362aa4a83d2e25d757dab", 0x58}, {&(0x7f0000002b00)="40b88ac949513aaa616fe957f13443d1cd6ead09a96b1690fef2d9aa689ff54ea0dbe2b54632336a0d5405a3a3d47561e34b6e8be8a36ce4cf30929a5537876e5d8bc187f6e60baa22783c42362606573a899a2cfbbb59be23e9e940b1f7731a508e3460072ac113bb384a15e845eae6f66256d4e4750140fc474598c5b86905390615858f39154171da0475f31584486ccaf8ef1152cd7e32e60542d708f28a47fde5583c037d5b8a0ab2f301b984f5ad154543958e1f1d6cfb3d93f453708b09fffb54a300600841edbe5542651a3cc1565ed2f48bec1bdfebc4f04670c05eaeacd5ea41e4b570214040a36110dafa764a", 0xf2}], 0x6, 0x0, 0x0, 0x20000000}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002d00)="5e81a35962fabdca68e3b92a22b5c91741037ff6", 0x14}, {&(0x7f0000002d40)="1be23902a558b3946a9ef85e72a7d5f6cfc5b3f17e8b96539e6c91d0410d7e3f04488a918c9220138be8a368f3a9031a8c044ffb81d4e3675372c877968d5ae541605bdda87700ffdc807c0938e039538843", 0x52}, {&(0x7f0000002dc0)="7b7ccc3e02bf88d8ed1cb3e18fd8dce6a8ffd6c7f42f832242ba1fc199d7df3e", 0x20}, {&(0x7f0000002e00)="06bb2b09d47c7f11c57a18131f46fb4677c109962da8b867e300b9fde3d1c00edc7bf3e489384a041ce04c457c9416665197c49b95a8ddc3c0b5352bf01a43f08f8f7df69cc71f4f1e751596af1eab7a83371fa639b26f970c59e6c331acd0e2bd06eac2c9ca85cd90411573c44e462a7873f2b41d9ed316228a059d7c4507c736de", 0x82}], 0x4, 0x0, 0x0, 0x800}, {&(0x7f0000002f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002f80)="9044e6b6509a1fc6b64d72c540f1a21ddc918f7f2f098876c4e124265331102fa4a6259a6320c3763533263bd506789838d0b7eec18d", 0x36}, {&(0x7f0000002fc0)="c40321f8fd433d33959fae75e5ad0985ec929937d313fdf1e2160bc1575e828535f3f2e642215684644e3ecaf46e62af989c67f1724cba16d05f4e9cae750afda136b3f7f4bb53fca11e6a59d09573737c62555091a1a794f72c183360f56ee4a6b4f7457094190425372c72f66c3a350dc5dc91f0225b866d9f302a2059751ec993370ea123c4118a99df1ce8a469958aed246b9875d9e462d94e79", 0x9c}], 0x2, &(0x7f0000003380)=[@cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @cred={{0x1c, 0x1, 0x2, {r29, r30, r31}}}], 0x60, 0x20000000}, {&(0x7f0000003400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004780)=[{&(0x7f0000003480)="353bf76109504b01e35f3a6f2da2d8b1e260a2a114f5cb1355760070254669e016f0e05ede805605188b456a0cff510a125134310301e8d27438c40edd351cafd949956b59ac16ef7cb5438fa41ae4c95117a794009ff82e6c7fa114f95224f2e00ce02b49bd616ab82f0896b1b1bb3266acc2e4ad2614", 0x77}, {&(0x7f0000003500)="0fb71f679edc25aae0da636065722cb795dcd37b7592e145ab0e8787312dde94a06958f2190ed8772e7fd8b52332a996baaf4c5bc6df42ce8f6d76d49299d17b0114f8373eab48b11a7cdd0accfe5d2e55d081c977494032b01547ba76f3ca64ce68b511735cf2b1b9d01ff39755109ea43617868109324a72e0db1114fce440b89275016cc210932a11b04d0d6678258b940682a8695eec8b9281cf07", 0x9d}, {&(0x7f00000035c0)="9f2b124b7e69416190ab2a8ab9ac387cc9328055ea1006b154012254b68a2c53614ce2a53721c10013c19e349dacd69631c1511a69b14f87be7b196232028216ec16a2a20cc7e05dd8fef282242d215e65e4354fd788401ed6d599ac6df9071f217be36bc88c92b4487059b724b6d7dc940472736340fa8f04b170d7d3e2d58108277e7b106dbefa790b04f66bd7e2d6da11fe71f63e4604ea25eb12ea30f78628aad1a8e1337f72f9", 0xa9}, {&(0x7f0000003680)="f35b2c0889a338bd48c94527cd0320469f57eb829aee455badd9228eab5bcb82b4815be9b8a4a176a46ef65b231d5c8d019966e2273e47c19d5f7e5ccfb7e3f7ebf337d9ead05b0bb26dbee1f6b0a68f050209d90f48b16affaa6ea45288028bd8a29c5691205e59ca6bd5cb570bd08de63ab19b7d2e2884eab83edec42f36444c8f17b489f41dc320291c9ba39e664e68b967112a7dda77929eec47e9c8cc65641661bc861ab97a54ee2882ffecf4be967aa321ce8b2a9f30ee79217db455f0b186854d8a2e7a3475dbddc6e54c72418a99ef9bea713a8e233c8a90fb5d5d86c74f971810ac4263446285", 0xeb}, {&(0x7f0000003780)="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", 0x1000}], 0x5, &(0x7f00000048c0)=[@rights={{0x18, 0x1, 0x1, [r0, r32]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r1, r0, r0, r0, r1, r1, r1, r1]}}], 0x70, 0x4000}, {&(0x7f0000004940)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f00000049c0)="84ba4adbcd4328f34d2fd063619875cbf150c99f106205b0292867751fde0ba55876349b99c172f99a13f0c876bed4495ed4efb59856eddc75ec7010a50daa67a6a58e2f1516dc09", 0x48}, {&(0x7f0000004a40)="ca1aae41c03005dd5cb6c0b0f6b7548380a3ea79aef7465752890126cdd74ae65209125e6ad8f8b526b1bc698c81d7e865bc552dce11a23ea045fb5d7786e6f48a9acb22966e03ee0f37265739e8f26c12821b89818521f3dc60dfe7691c0fca31c9cc521f1012624682dabcb09d87770da9ed1c63c1bed3cd01021a1995f6c7a62afca65de913d911399b58829da8a42b585066de5c2f5055e463856d536ab6ec0a494379476efd51faaa7aa8041492ad19def68795225b1acc054d909340477a3591b731e4aaf25e97", 0xca}, {&(0x7f0000004b40)="fb8a683be59ed5000cf0f424deb80df66dc9bedd1061961e07bdc0e41ad40520731028916ed4cfbf7549be27511b7a0ff521e37b", 0x34}, {&(0x7f0000004b80)}, {&(0x7f0000004bc0)="dd9b3dff8432625a957c66cd8e8512c3c06242600046d81d214d441bf62485d809a7c9bab7a2b5acdadd9f93706f42ea6d49150b480f4bc610c35b6585a46dbd9029114e1c633350d64ad6b829af56e7af779d919f002db73fa2d2fa0878325af340c0e17e006d3479f1fd5258", 0x6d}, {&(0x7f0000004c40)="c20a97c4cc6e7ff61a210575b924e73af2d8abe0c28821b1fe70dd7fb0c157f9fbb7621c1142004e4f5e2c76f4954d754a", 0x31}, {&(0x7f0000004c80)="17f888de0cecbc3f8e9551", 0xb}, {&(0x7f0000004cc0)="65a426a9eb3eb21fc1f277394bc2f95f57e5ea5b2a767b3e2fa1119fcfd7ac133d069bbf16abf5ada62d0a", 0x2b}, {&(0x7f0000004d00)="a62eb91e83edb18fb9bf645032cfd456e89e9de5819ce0159ff4d1b800b008ea62c760d61021203c6bc01db536853b1c48aade66f3d16132bdf614dc987fd5db63d1c448102a6e4092402b50c04e9aba74a2693cb452b6a574509c73dcce44329f059f02e8befcbbd7b6d105cd2c49fbeca53fed588cb9fe1af0f8187859b5334366384d875754b037e28d4ba800bf8aac7c42e6ae564b5486", 0x99}], 0x9, &(0x7f0000005300)=[@cred={{0x1c, 0x1, 0x2, {r33, r34, r35}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r36, r37, r38}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r39, r40, r41}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r42, r43, r44}}}], 0x110, 0x40}, {&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005700)=[{&(0x7f00000054c0)="7ef32d1ea2a2c26ec70b5b9e8e766f5c2763de37e2256c325218025af1201a12dedfdf3768a4d2859f9927962aa5c420bae74e7a81be879d8b1d759586c638", 0x3f}, {&(0x7f0000005500)="76fd7bfd83702ed9c8317637f98964022531261674cb001b7de46d7f0f119c14572bb63cfcd7b188574fed86f06d8c994560115065b06b0674bda6c47db983b1731033cc822f2ad4a981128cb27ae26882450d29112744d16bbe5e8bd391d4b94b8451d1c6023d73ebf73cdb24fa20315062fa24", 0x74}, {&(0x7f0000005580)="f4ae604b02bfd88987b71904c4f3a25add43c18296a83715b564543904973d1bfa81fd0d886fc179c4639284ac4a018b58ccc25c14b70a911adda6e6426374b7f2dc40b8e615e4b19a517714d09fb2f93f15f8b960", 0x55}, {&(0x7f0000005600)="0eadec83f3d491431df4f93b73f80b3d3c02d3089b261d3a3d7ac9bbc7303b321a4ba0541eda57c1bce2d27590989582eda4448f5d5706736780475acfd66303a106b729cbbed10ae84d6a9bb2eb4b400a7775ce99f3430f32ba83837067cd0d58ec0dfdbb0a2821ac75fd8fdadf7d268bb335592ac9bf659f4adaf5f44cd40e34e8569d7f7582eeb48026c3f93a08c636ef054969e64337df29de8560dc21d73c1523fb841591c9644f23cb45346d69366ce99ffa3a0a5d9bfde13e0558b90cf6e88993babc6d589b2feef5fc0bdc3f68c53a0d486336e5cfc1470430dd32f3dc10be9f620283faaae9c725cf13375c", 0xf0}], 0x4, &(0x7f0000005b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r45, r46}}}, @cred={{0x1c, 0x1, 0x2, {r47, r48, r49}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r1, r0, r0, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r50, r51, r52}}}, @cred={{0x1c, 0x1, 0x2, {r53, r54, r55}}}, @cred={{0x1c, 0x1, 0x2, {r56, r57, r58}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}], 0x118, 0x44000}, {&(0x7f0000005c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007dc0)=[{&(0x7f0000005d00)="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", 0x1000}, {&(0x7f0000006d00)="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", 0x1000}, {&(0x7f0000007d00)="c85254c8bcad7c6bbff30491cd056a11ed88b020d87abcbc3e259f3fbcee59dc7cdc302b1bcd2a36a5c28f6c4814f3a42254902a7bf725bdf1a0cc6283071b6cfd6e1476961ecb4ff6bb44162f1e5d921398840ed0223378b84fde4b0c13f85105e6e52032c6cb22b2dd5393bdd1ded78c99dd29abb506d7d82852f43cf9ec7e97480866b31243e0e0df9423f36341430263be481aee2f64", 0x98}], 0x3, &(0x7f0000008380)=[@cred={{0x1c, 0x1, 0x2, {r59, r60, r61}}}, @cred={{0x1c, 0x1, 0x2, {r62, r63, r64}}}, @cred={{0x1c, 0x1, 0x2, {r65, r66, r67}}}, @cred={{0x1c, 0x1, 0x2, {r68, r69, r70}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r71, r1, r1, r1]}}], 0xc0, 0x1}], 0x9, 0x300e23bb8e42edc3) r72 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xcc376f1a478cd104, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r72, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1, 0x7, 0x8, 0x2, 0x7, 0x100000001, {0xfffffffffffffff9, 0x8, 0x8001, 0x1, 0x9, 0x1f, 0x1, 0x21f, 0x1, 0x2, 0x8, 0x8001, 0x8000, 0x200, "f0e38ae5cc5dd7d585dfcd483ad78a579af7842f175fd169265e43c157bbcd89"}}) [ 1312.231130][ T5272] ref_ctr_offset mismatch. inode: 0x4340 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:54 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x3ff) 23:38:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)) 23:38:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x600, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x90400) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000200)="06e5e46042af3af80ba95215218417202f6c4c8de8dc6f1e646eb415dc59c3d1ba9f3d5c7adc2dfbd8e88b1c0351a932896f95ee9414c04682df61aa03c4bf772cc8dc28a0bf8ce950544d6a9e2d5ded25abc7b2") ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000180)) sendfile(r1, r3, 0x0, 0xbd19) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) [ 1312.824290][ T5288] mkiss: ax0: crc mode is auto. 23:38:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x700, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:55 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1313.169685][ T5283] sp0: Synchronizing with TNC 23:38:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x541c, &(0x7f0000000000)) [ 1313.405772][ T5303] sp0: Found TNC [ 1313.519044][ T5330] ref_ctr_offset mismatch. inode: 0x434f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x10, @time={r3, r4+10000000}, 0x7, {0x3, 0x6e422586}, 0x1, 0x2}) sendfile(r1, r2, 0x0, 0xbd19) 23:38:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x4000, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:56 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/132, 0x84}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000000580)=""/22, 0x16}], 0x7, &(0x7f0000000640)=""/140, 0x8c}, 0x2) fcntl$dupfd(r0, 0x406, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1313.854959][ T5340] mkiss: ax0: crc mode is auto. 23:38:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1314.201445][ T5356] sp0: Synchronizing with TNC [ 1314.310413][ T5363] sp0: Found TNC 23:38:56 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000000)) 23:38:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x1000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:57 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) write(r0, &(0x7f0000000200)="1f0d839b05fcdaaba6595819e657497598b3d584158dfb0d0fae579e4ae43c14f3ec65d8f24f2b2ef8d1dda9fa06ca531e4e8b06c7963b23516f065e7130b824af970dfd59ce21065fae77341b4356ae31c30707b0584a257ba18054c57a336947230793b6936ec39571335a52ad", 0x6e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8002) syz_extract_tcp_res(&(0x7f00000002c0), 0x7ff, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000040)={0xffffffff, 0x4, 0x0, {0x0, 0x989680}, 0x7, 0x9}) r3 = openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000180)='cp\x7f_mem\x19n\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x80\xca\x16&\x05\xec\xdb2dv\x8bJ\x85i:\x13\xd8A\x18-&\x9cOY\xe90\x19\xd0\xf6\'%$*\xcb$i\xe8\xe3\xdc$\x9e\x92\xa0\xbfwY\xa9\xde\xf8\x1b\xed\xefj', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xbd19) lseek(r2, 0x0, 0x4) 23:38:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1314.741849][ T5384] mkiss: ax0: crc mode is auto. 23:38:57 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x8800) ioctl$KDMKTONE(r0, 0x4b30, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1314.981027][ T5399] ref_ctr_offset mismatch. inode: 0x4353 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x2000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1315.185873][ T5384] mkiss: ax0: crc mode is auto. 23:38:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000180)={r2, r1, 0x9}) 23:38:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)) 23:38:58 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:38:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x3000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:38:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x101005, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1b) 23:38:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpusep.gffectiveems\x00\xe4\ng;R\x92\xfc\xc4\x04\b5<\xc2\x81t0\xd1\x03\x00\x00\x00\xa9;\xaa\xceg\xfc\v\xe7\n\xba\x11\xb7\x05i*\x12\xb8#ND\xfeWB>!\xd3\xaa\xff^\xb9\xe0\xe0\r\xdf\xd2\xd0)\xb42\xe7\xb7S\xf9*3>\xf8\x885\xf8\xa4\xab\xdc\x95\xd2\x7fb\x13\xca@x0\x88\xb8H\nr\xd7/k\x12\xab7\xdb[\x14\x00\xd9', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xbd19) [ 1316.067188][ T5452] mkiss: ax0: crc mode is auto. [ 1316.346480][ T5456] ref_ctr_offset mismatch. inode: 0x434d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:38:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x541f, &(0x7f0000000000)) 23:38:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x46800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{}, {0x0}]}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000280)={r2, 0x5, &(0x7f0000000180)=[0x7, 0xe1c, 0x8001, 0x10000, 0x3f], &(0x7f00000001c0)=[0x0, 0x4, 0xae7a, 0xb6d, 0xffff, 0x100000001, 0xa, 0xfffffffffffffffb], 0x1, 0x5, 0xff, &(0x7f0000000200)=[0x7fff, 0x7, 0x7, 0x0, 0x2e], &(0x7f0000000240)=[0x7, 0x80000000000000, 0x4, 0x3]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:38:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:38:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) 23:38:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x4000000, 0x40046304}], 0x0, 0x0, 0x0}) [ 1316.888177][ T5451] ref_ctr_offset mismatch. inode: 0x434d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1317.170999][ T5485] sp0: Synchronizing with TNC 23:38:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000000)) 23:38:59 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1317.354164][ T5489] sp0: Found TNC [ 1317.583760][ T5489] sp0: Synchronizing with TNC 23:39:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x5000000, 0x40046304}], 0x0, 0x0, 0x0}) [ 1317.741092][ T5515] mkiss: ax0: crc mode is auto. 23:39:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='$)\\\xddA\x05\'\xf1\xe2KLy\xbc\xd2\x82$\xc7_\xce\xf6\x80\xd1\x1dw\xd6\xd9\x93Wx\xbb^\x15\xdb\x18\xd9\x83lD\xf7R1\xda\x00\xf0V\x86|\xa4\x15>e`n40*\xaf\xc9\x83Y\xf6\n\xdc\x12Q\xa5\xecKHs\xa6\x01\x84\x93y\'\x06\b\xa1*\x00\x80\xee5\xb2\xd0\xef\xe7\xd4\xe9OV\x05,\x96\x96\xbd@\x1b\xc8`\xbd\xee\x02\x14zFV\xfdd\xbd\x054\xc0\xfek', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1317.845511][ T5522] ref_ctr_offset mismatch. inode: 0x4377 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x82000, 0x0) r2 = getpid() write$P9_RGETLOCK(r1, &(0x7f0000000080)={0x1f, 0x37, 0x1, {0x2, 0x7, 0x8, r2, 0x1, '#'}}, 0x1f) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 23:39:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x80, 0x2, 0x1, {0x5, @pix={0x800, 0x6e0, 0xeb11f2c9576378ab, 0x8, 0x2, 0x4, 0x3, 0x1a87, 0x1, 0x8}}}) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd16) 23:39:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x6000000, 0x40046304}], 0x0, 0x0, 0x0}) [ 1318.617031][ T5547] sp0: Synchronizing with TNC 23:39:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1318.677616][ T5554] sp0: Found TNC 23:39:01 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000000)) 23:39:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x7e54105ad243ec41) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x7000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1319.354291][ T5586] ref_ctr_offset mismatch. inode: 0x4377 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000180)) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1319.734657][ T5591] mkiss: ax0: crc mode is auto. 23:39:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x40000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000000)) 23:39:02 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xbd19) 23:39:03 executing program 3: mknod(&(0x7f00000001c0)='./file0\x00', 0x200001040, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3e) recvfrom$unix(r2, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0xa0010000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1320.823522][ T5636] mkiss: ax0: crc mode is auto. [ 1320.844175][ T5638] ref_ctr_offset mismatch. inode: 0x40b2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0xfdfdffff, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x33, "2130089b8562f480ebe0ba5c84b82e2ccfd0b16c9c597f42f208d34b94a86d6150934a6601ae15c05ec66b2f9c8c62107baf15"}, &(0x7f0000000040)=0x3b) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r3, 0x5, 0x0, 0x6}, 0x10) sendfile(r1, r2, 0x0, 0xbd19) [ 1321.329546][ T5636] mkiss: ax0: crc mode is auto. 23:39:04 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000000)) [ 1321.860790][ T5657] sp0: Synchronizing with TNC 23:39:04 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x4042) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000180)={0x9, 0x4, [0x1, 0x0, 0x81, 0x1, 0x87e], 0xfffffffffffff801}) sendfile(r2, r3, 0x0, 0xbd19) 23:39:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0xfffffdfd, 0x40046304}], 0x0, 0x0, 0x0}) [ 1322.001812][ T5681] sp0: Found TNC [ 1322.011808][ T5689] ref_ctr_offset mismatch. inode: 0x4152 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1322.323925][ T5704] mkiss: ax0: crc mode is auto. 23:39:05 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x410800, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x101, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000040)=0xffffffe7) 23:39:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x1a0ffffffff, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, r1, 0x5, 0x89bda8b12dd568cb}, 0x10) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0xbd19) 23:39:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\xff', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000000)) 23:39:05 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1323.235019][ T5735] sp0: Synchronizing with TNC 23:39:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x100000000000000, 0x40046304}], 0x0, 0x0, 0x0}) [ 1323.397321][ T5751] mkiss: ax0: crc mode is auto. [ 1323.486553][ T5752] ref_ctr_offset mismatch. inode: 0x4181 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendto$x25(r2, &(0x7f0000000180)="d8c50cd7c6b9b14fa43396d76d662d643963662fa36f98358bc27ea00e93d142826c0cfd3604c185530b088cdce97124011f20bdf2ec5e577e9934c592645c5443adbf97dd1c1463d427c48d07b7b6eae0315a444f5c52f84f9865b2f3175175636c563406c15c6ce33d2366c0f750e0eaca3bb98fde", 0x76, 0x4, &(0x7f0000000080)={0x9, @remote={[], 0x3}}, 0x12) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xbd19) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc0002, 0x0) [ 1323.866679][ T5751] mkiss: ax0: crc mode is auto. 23:39:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) sendto$x25(r1, &(0x7f0000000080)="6ec2", 0x2, 0x8000, 0x0, 0x0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000140)=0xc3b, 0x4) 23:39:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x200000000000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:06 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1324.449878][ T5798] sp0: Synchronizing with TNC 23:39:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5429, &(0x7f0000000000)) 23:39:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x9, 0x2dd6, 0x2, 0x9, 0x4, 0xfffffffffffffffc}) sendfile(r1, r2, 0x0, 0xbd19) [ 1324.679014][ T5802] sp0: Found TNC [ 1324.957522][ T5815] ref_ctr_offset mismatch. inode: 0x40b3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x300000000000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5435, &(0x7f0000000000)) 23:39:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x4, 0x2, 0x8, 0x181e}, {0x0, 0x1, 0x6, 0x1}, {0x1, 0x1ff, 0x1, 0x835}, {0xffff, 0x7, 0x7, 0x7}, {0x5, 0x7ff, 0x1, 0x9}]}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xe) 23:39:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @multicast2, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x243220}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, r3, {0xa, 0xf}, {0xffff, 0xfff3}, {0x9, 0xffe0}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0xbd19) [ 1325.657651][ T5841] sp0: Synchronizing with TNC [ 1325.847583][ T5854] sp0: Found TNC [ 1325.885363][ T5850] mkiss: ax0: crc mode is auto. 23:39:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x400000000000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:08 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe3026}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1326.180207][ T5841] sp0: Synchronizing with TNC [ 1326.219312][ T5850] mkiss: ax0: crc mode is auto. [ 1326.305705][ T5854] sp0: Found TNC [ 1326.594410][ T5891] ref_ctr_offset mismatch. inode: 0x42a1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x1, @rand_addr="bf938385d6a1cbfdf14e8454f82f53b0", 0x2}, {0xa, 0x4e21, 0x101, @local, 0x8}, 0x3, [0x81, 0x8, 0xfffffffffffffffa, 0x8, 0x9, 0x660, 0x106, 0xfffffffffffffff9]}, 0x5c) sendfile(r1, r2, 0x0, 0xbd19) 23:39:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000000)) 23:39:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x500000000000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000140)={0x2e0000000, "546d4c95affb7ef77f0d1efc4e3e42372ae50965a675f237f559babfb87e9835", 0xd3498cd16582a511, 0x7fff, 0xffffffffffff88e4, 0xff06ff, 0x2}) [ 1327.362482][ T5915] mkiss: ax0: crc mode is auto. 23:39:10 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1327.627986][ T5929] sp0: Synchronizing with TNC 23:39:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:39:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x600000000000000, 0x40046304}], 0x0, 0x0, 0x0}) [ 1327.837630][ T5932] sp0: Found TNC 23:39:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000000)) [ 1328.275639][ T5942] ref_ctr_offset mismatch. inode: 0x41a2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x700000000000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1328.828881][ T5967] mkiss: ax0: crc mode is auto. 23:39:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) openat$cgroup_int(r2, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) 23:39:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x1a0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1329.453010][ T5985] sp0: Synchronizing with TNC 23:39:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x4000000000000000, 0x40046304}], 0x0, 0x0, 0x0}) [ 1329.507555][ T5990] sp0: Found TNC 23:39:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) accept4$alg(r2, 0x0, 0x0, 0x669c04c3db6bd95a) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000040)={{0x80000000, 0x6e3}, 0x0, 0x0, 0x1, {0x401, 0x1}, 0x0, 0x800}) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000180), &(0x7f0000000200)=0x6e) sendfile(r1, r3, 0x0, 0xbd19) 23:39:12 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000000)) 23:39:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1330.191435][ T5985] sp0: Synchronizing with TNC [ 1330.261058][ T5990] sp0: Found TNC [ 1330.305517][ T6021] ref_ctr_offset mismatch. inode: 0x4211 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0xfdfdffff00000000, 0x40046304}], 0x0, 0x0, 0x0}) 23:39:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000080)=0x44) sendfile(r1, r3, 0x0, 0xbd19) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x240, 0x4) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0xdba7, 0x2) write$P9_RLINK(r3, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) [ 1330.606281][ T6011] ref_ctr_offset mismatch. inode: 0x4211 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001140)=@generic={0x2, 0xa7, 0x800}) getrandom(&(0x7f00000011c0)=""/4096, 0xfffffffffffffffe, 0x1) syz_open_dev$sndtimer(&(0x7f0000001180)='/dev/snd/timer\x00', 0x0, 0x101000) 23:39:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000000)) 23:39:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x480, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0xffffffffa0010000, 0x40046304}], 0x0, 0x0, 0x0}) [ 1331.431383][ T6055] mkiss: ax0: crc mode is auto. 23:39:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:39:14 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1331.791327][ T6055] mkiss: ax0: crc mode is auto. 23:39:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x630b}], 0x0, 0x0, 0x0}) 23:39:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000000)) 23:39:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) accept$netrom(r2, 0x0, &(0x7f0000000000)) [ 1332.735091][ T6098] binder: 6097:6098 unknown command 0 [ 1332.842459][ T6095] ref_ctr_offset mismatch. inode: 0x4261 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1332.914108][ T6098] binder: 6097:6098 ioctl c0306201 20000080 returned -22 [ 1333.141598][ T6100] binder: 6097:6100 unknown command 0 [ 1333.194994][ T6107] mkiss: ax0: crc mode is auto. 23:39:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1333.257741][ T6100] binder: 6097:6100 ioctl c0306201 20000080 returned -22 23:39:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) io_setup(0x50, &(0x7f0000000000)=0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40040, 0x0) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1acf326c93951128, 0x8, r0, &(0x7f0000000180)="a48e23bb9c889b26995600a1465a231da27032ebd91c7ddfb587c1646247ae4ce00a01ab07516cc1381d715bd4b7b15a7c31e7b61995168f64ef9227ef5f3866bc8e436b75d3897b807ef3d5b8227b1b7ba9482fe4841b17ddf64dd397ce7721cf00d5bef5e799eb476b04e5f92bf024f64a52fa4a964089e863834cf9a0a74b33e9501335c7e1b1d99f11487762c794e3e403869b3b9fab1183f7ccc6bde8653b75f357a0c86c610f8adfb679373d91924708", 0xb3, 0x5, 0x0, 0x0, r2}, &(0x7f0000000240)) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xbd19) fremovexattr(r4, &(0x7f0000000440)=@known='user.syz\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x41, "faf747fb1ee48c98c1b0812fb24f351b0230ea93f5d96a0bacf8ea9d3cd1dbf6257c4e599700d6244558c94781c501e2d8300603e56b4a9bd78aee72c81e3fc11e"}, &(0x7f0000000300)=0x49) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e21, 0xffff, @loopback, 0x10000}}}, &(0x7f0000000400)=0x84) [ 1333.777714][ T6107] mkiss: ax0: crc mode is auto. 23:39:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) syz_open_pts(r0, 0xa749ec2fe2207af5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x7, 0x4, 0xa66, 0x9}) 23:39:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x630c}], 0x0, 0x0, 0x0}) 23:39:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1334.236267][ T6142] binder: 6136:6142 unknown command 0 [ 1334.241704][ T6142] binder: 6136:6142 ioctl c0306201 20000080 returned -22 23:39:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000000)) 23:39:16 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1334.704582][ T6159] binder: 6136:6159 unknown command 0 [ 1334.855680][ T6154] ref_ctr_offset mismatch. inode: 0x4391 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:17 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'rose0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r2}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfffffffffffff35e) [ 1334.936566][ T6159] binder: 6136:6159 ioctl c0306201 20000080 returned -22 23:39:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0x15) 23:39:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x1001, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000000)) 23:39:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x630d}], 0x0, 0x0, 0x0}) [ 1335.527177][ T6169] sp0: Synchronizing with TNC 23:39:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='\xe8ugetlb.2OZ.failcnt\x00\xe9\xc3\x8a\xd2{\'\xcdT\xc9\xa3\x1d\xa7\xe02\x9e]\xa3\x8fx\xaf2d:\xcb\xdd\xeb\xfd_\xebB\xd1\x81\xa0\xcct\x1aIaT\x92\x8b\x93<\x84W\x88G\x88\xc8N\xd3\x89\x11\xc4I\xdd\x04=\x9bo\xc7\x91NL\xbcr\xc9\xf5\x9aM\xb8\xb0?\x12\x80\xa4#]\xd7\xb3A\x83I,R\x17r\xf1\x19\x9e^\xab\xea8\x0f\xa8\xa1L\xd8\x01\x00\x00\x00we3\x94\xe7\xa2 \xdcY1\x85\xd5\xb4\x81\xc0\xbd\x00d\x1c;\xfa\f\xff\x85\x8a\'\xddn\x18\xde\xb1\x14\x9bS\x98%1\x81\x8el\xb4\xae\xc1\xed}\x93\xa9\xc6\xdbvr\xbd\xf1N\x95O\xdc\x96\xeb\x8e{Q\xd1\xc3\x1b\x1fx\xfe\xb1\xe3\xfa', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="682192e2551c5ee7480f33bf543da2cd04f85ad4ad5e", 0x16}, {&(0x7f0000000180)="e1384bb12e31526cf9d5e44776616d10c846a108b197ab6532967c136cbcfc5e3f7027bfaa19fae2682a57f949fe3b52be0280e780a59737b9b01fd9e129199e2b3cfc4573e43f8ddd0d07d1b49a7f81a794163993c504c00fca8c8d7b57bd67d5f0431875d88cffa7378d85a01a5745b36ff5cdf3ea1fc6cf2fe3b68cd141b1bbb550030c8ea18bed0b71845b25fb7d1311ca7ebb61297e72d66520c374fdc239a3d4ab2884bf083c12f8609aa92ac8464449af44a143f1cb2dc145d39efecb2acf88c55b2461766a", 0xc9}, {&(0x7f0000000280)="35e14d82b2d8d29cc54a34fd9e1074e55982b278593f05e70953c467", 0x1c}, {&(0x7f00000002c0)="97d4f3680c327195a1b244280cb2738c2cec5de8cfab9280b8f4e4ed00ed486e09743fd8f469f380c314f5c63550fc5c8083150c7f93bf1368c699fde6da26ee1cdbd81d0ce81f26a0f6e8aa8c29709fb7fcdf6d967781c61520807ab6a0bf8eea70efa227bac422929342cf44529d4adee2b3b428a00084c929a5868450a5de", 0x80}], 0x4}, 0x40010) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) [ 1335.772824][ T6185] binder: 6178:6185 unknown command 0 [ 1335.965332][ T6169] sp0: Synchronizing with TNC [ 1335.984115][ T6184] mkiss: ax0: crc mode is auto. [ 1336.014565][ T6185] binder: 6178:6185 ioctl c0306201 20000080 returned -22 [ 1336.218522][ T6185] binder: BINDER_SET_CONTEXT_MGR already set 23:39:18 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1336.397236][ T6185] binder: 6178:6185 ioctl 40046207 0 returned -16 23:39:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x100000000007) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x6364, &(0x7f0000000000)) 23:39:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000000)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000900)={r2, r2, 0x8, 0x86, &(0x7f0000000840)="2ea44182e2acd15c66e310b7b9f50f0999454942539b9a2d40b489e2d8cfd396d6f2931385bb95e3737258672308e84265ed6b1a00de6bb63068ce8caa2255ef6fdb4c25462ca99a56f82038b0c17c9ea682016bcb9d50b5fb24d82136a92c90e7728df56b03c36c23c98f9f3761b0aa92ad1203fc7ba79aa3aece6568ec951582c7b653011b", 0xffffffffffffffff, 0x3, 0x0, 0x2e0, 0x7e49, 0x1, 0x88, 'syz1\x00'}) r8 = getgid() stat(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="6003ffff0700000000000000000000000000000000000000000000000000008000000000ff7f0000000000003f000000040000000100000000000000008000000000000005000000000000000000000000000000ff0300000000000009000000000000005166000000000000010000008000000003000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="20000000090000000000000006000000000000006ea00000000000000d000000010000002e2f6367726f75702e63707500000000010000000000000000000000000000000200000000000000880000000000000001000000010000800500000000000000730a000000000000040000000000000005000000000000000200000000000000bac70000000000000010000001000000040000004433000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="030000007f00000000000000010000000000000005000000000000001d000000810000005e73656375726974792973656c6647504c76626f786e657430656d302a000000000000000000000000000000000000000000000000000000010000000000000058da00000200000006000000000000000500000000000000120f0000000000004af5000000000000040000000000000005000000000000001752000040000000ffffffff1604463a3f000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0001000001000100000000000400000000000000008000000000000011000000010000006574683147504c73656c696e7578656d300000000000000006000000000000000100000000000000ff00000000000000018000000000000007000000010100000300000000000000080000000000000009000000000000000400000000000000029900000000000008000000000000000700000005000000010001000300000081000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05000000050000000000000005000000000000000900000000000000000000004137614e0300000000000000010000000000000004000000000000008e0300000000000005000000008700000500000000000000ff7f000000000000000000800000000007000000000000000400000000000000ffff000000000000000000000180000000080000400000007d000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0900000080000000000000000000000000000000080000000000000009000000000000006d696d655f7479706500000000000000"], 0x360) sendfile(r1, r2, 0x0, 0xbd19) 23:39:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x8004, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046302}], 0x0, 0x0, 0x0}) 23:39:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x17) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa100, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000001c0)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={r2, &(0x7f0000000140)=""/22}) 23:39:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x8901, &(0x7f0000000000)) [ 1337.785536][ T6251] binder: BC_ACQUIRE_RESULT not supported [ 1337.791409][ T6251] binder: 6242:6251 ioctl c0306201 20000080 returned -22 23:39:20 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x80) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:39:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1338.223259][ T6264] binder: BC_ACQUIRE_RESULT not supported [ 1338.246130][ T6260] mkiss: ax0: crc mode is auto. [ 1338.369300][ T6264] binder: 6242:6264 ioctl c0306201 20000080 returned -22 [ 1338.469814][ T6267] ref_ctr_offset mismatch. inode: 0x439b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:21 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x80000000, 0x0, 0x0, 0x6, 0xb, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046303}], 0x0, 0x0, 0x0}) 23:39:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x20000, 0x80) sendfile(r1, r2, 0x0, 0xbd19) 23:39:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x8903, &(0x7f0000000000)) 23:39:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1339.105703][ T6286] sp0: Synchronizing with TNC [ 1339.254137][ T6289] sp0: Found TNC [ 1339.370237][ T6295] binder: 6294:6295 unknown command 1074029315 [ 1339.545402][ T6295] binder: 6294:6295 ioctl c0306201 20000080 returned -22 [ 1339.548768][ T6306] mkiss: ax0: crc mode is auto. 23:39:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:22 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400240, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xbd19) 23:39:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1339.824976][ T6301] binder: 6294:6301 unknown command 1074029315 [ 1339.944938][ T6301] binder: 6294:6301 ioctl c0306201 20000080 returned -22 23:39:22 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1340.276185][ T6329] sp0: Synchronizing with TNC 23:39:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046305}], 0x0, 0x0, 0x0}) [ 1340.401528][ T6306] mkiss: ax0: crc mode is auto. [ 1340.473075][ T6335] sp0: Found TNC 23:39:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000040)={0x1000, 0x3, 0x1, 0x0, 0xfffffffffffffff7}) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xbd19) 23:39:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1340.803200][ T6352] ref_ctr_offset mismatch. inode: 0x43ab offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1340.829379][ T6335] sp0: Synchronizing with TNC 23:39:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x8912, &(0x7f0000000000)) 23:39:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046306}], 0x0, 0x0, 0x0}) 23:39:23 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x208000, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x1, r0}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1341.616850][ T6388] mkiss: ax0: crc mode is auto. 23:39:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x9169f8a240efd04e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r2) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xbd19) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000000)={0x3, 0x1, [0xe8, 0xff, 0xfffffffffffffffb, 0xcf8d, 0x4, 0x200, 0x80000000, 0x4ed2]}) 23:39:24 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1342.045866][ T6399] sp0: Synchronizing with TNC 23:39:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x8933, &(0x7f0000000000)) [ 1342.318816][ T6416] sp0: Found TNC 23:39:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0}) [ 1342.345856][ T6412] ref_ctr_offset mismatch. inode: 0x43ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1342.865224][ T6431] sp0: Synchronizing with TNC 23:39:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) sendfile(r1, r2, 0x0, 0xbd19) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x14, &(0x7f0000000200)='hugetlb.2MB.failcnt\x00'}, 0x30) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7, 0x7f00, 0x2, 0x0, 0x0, 0xfffffffffffffff7, 0x2000, 0x1, 0xffffffff, 0x5, 0xffffffffffffcec4, 0x1ff, 0xfffffffffffffffa, 0x3, 0x81, 0x40, 0x1ff, 0x5, 0x80000001, 0x7, 0x20, 0x100, 0x5, 0xffffffffffffff9b, 0x1, 0x81, 0x1, 0x7, 0x0, 0x2dec0000, 0x7, 0xffffffffffffb19c, 0xffff, 0x200, 0x1, 0x5, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000080), 0xd}, 0x400, 0x0, 0xfffffffffffffff8, 0x4, 0x401, 0x9, 0x2}, r3, 0x4, 0xffffffffffffffff, 0x8) r4 = getpid() ptrace(0x8, r4) 23:39:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x4004630c}], 0x0, 0x0, 0x0}) 23:39:26 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x594) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000040)=0xffffffed) 23:39:26 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x8946, &(0x7f0000000000)) 23:39:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1343.965579][ T6466] binder: 6461:6466 unknown command 1074029324 23:39:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgrhup.j\xf13\xe6\\\xf9\xff(/kky\fcpu\x00\x00\x00\x00\x00\x00\x00\xea\x8e}\xdf\xe2\x0e\xe7 7\x96\xd20Y;\xf8\x80\x84J\xa5OW\xc33U{\xa7\xe98\xf2\xf6\xdc\xb4\xcd\tEg[[\x97\xdb8M\xbe\x91\xc4u\xd7\xae\x930E\x1c\x9elUKYG\x10(\x11\xe9\x89\x00'/124, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='./cgrhup.j\xf13\xe6\\\xf9\xff(/kky\fcpu\x00\x00\x00\x00\x00\x00\x00\xea\x8e}\xdf\xe2\x0e\xe7 7\x96\xd20Y;\xf8\x80\x84J\xa5OW\xc33U{\xa7\xe98\xf2\xf6\xdc\xb4\xcd\tEg[[\x97\xdb8M\xbe\x91\xc4u\xd7\xae\x930E\x1c\x9elUKYG\x10(\x11\xe9\x89\x00', 0x2) sendfile(r1, r2, 0x0, 0xbd19) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080)={0x4, 0xffffffff80000001, 0x7, 0x3, 0x8, 0x2}) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) [ 1344.100243][ T6466] binder: 6461:6466 ioctl c0306201 20000080 returned -22 [ 1344.225414][ T6472] ref_ctr_offset mismatch. inode: 0x43ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1344.254156][ T6468] sp0: Synchronizing with TNC [ 1344.302186][ T6479] binder: 6461:6479 unknown command 1074029324 23:39:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x10010000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x89a0, &(0x7f0000000000)) [ 1344.641794][ T6479] binder: 6461:6479 ioctl c0306201 20000080 returned -22 23:39:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000180)=0x95, 0x4) sendfile(r1, r2, 0x0, 0xbd19) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000240)={@rand_addr, @loopback, 0x0}, &(0x7f0000000280)=0xc) recvfrom$packet(r2, &(0x7f0000000000)=""/188, 0xbc, 0x12000, &(0x7f00000002c0)={0x11, 0x1a, r3, 0x1, 0x101}, 0x14) 23:39:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046312}], 0x0, 0x0, 0x0}) 23:39:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0xffffffeb) 23:39:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x9204, &(0x7f0000000000)) [ 1345.700030][ T6513] binder: 6510:6513 unknown command 1074029330 [ 1345.944271][ T6513] binder: 6510:6513 ioctl c0306201 20000080 returned -22 23:39:28 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x68) [ 1346.074952][ T6524] binder: 6510:6524 unknown command 1074029330 [ 1346.083343][ T6524] binder: 6510:6524 ioctl c0306201 20000080 returned -22 23:39:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x80040000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1346.372616][ T6528] mkiss: ax0: crc mode is auto. [ 1346.514422][ T6537] ref_ctr_offset mismatch. inode: 0x43be offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4800, 0x0) write$vhci(r1, &(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, "f249a31ce9f78a3684dad97b5e6f36e51483e9e261dc029de7ab3d2bdb8d14e8ad93a237d6f95129c3d0bfa8e4a666af153d"}, 0x33) 23:39:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) r3 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x7, 0x47, 0x3, 0x3f, 0x0, 0x1e68, 0x10020, 0x1, 0x8, 0x0, 0x8, 0x9, 0x10001, 0x7, 0x0, 0x2, 0x10000, 0x9, 0x9, 0x1, 0x7fffffff, 0x4, 0x3, 0x80, 0x1, 0x9abf, 0x9, 0x65c, 0x7, 0xe426, 0x9, 0x8000000000000000, 0x9, 0x4, 0xfffffffffffffffb, 0x2, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0x80000000, 0x7, 0x3, 0xb27, 0x7, 0x68ce}, r3, 0x10, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) openat$cgroup(r4, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:39:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40086303}], 0x0, 0x0, 0x0}) 23:39:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xae01, &(0x7f0000000000)) 23:39:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xa0010000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1347.255027][ T6553] sp0: Synchronizing with TNC 23:39:30 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1347.438563][ T6555] sp0: Found TNC 23:39:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x4008630a}], 0x0, 0x0, 0x0}) [ 1347.534629][ T6569] mkiss: ax0: crc mode is auto. 23:39:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) 23:39:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x1f, 0x18}, 0xc) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1348.019626][ T6596] binder: BC_ATTEMPT_ACQUIRE not supported 23:39:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1348.192736][ T6596] binder: 6589:6596 ioctl c0306201 20000080 returned -22 [ 1348.218946][ T6599] ref_ctr_offset mismatch. inode: 0x43ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1348.374696][ T6597] binder: BC_ATTEMPT_ACQUIRE not supported [ 1348.380888][ T6597] binder: 6589:6597 ioctl c0306201 20000080 returned -22 [ 1348.496218][ T6591] ref_ctr_offset mismatch. inode: 0x43ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x402, 0x0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd19) [ 1348.565286][ T6606] sp0: Synchronizing with TNC [ 1348.640407][ T6569] mkiss: ax0: crc mode is auto. 23:39:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xfeffffff, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1348.745494][ T6606] sp0: Found TNC 23:39:31 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40086310}], 0x0, 0x0, 0x0}) [ 1349.329691][ T6606] sp0: Synchronizing with TNC 23:39:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='.Icgroup.cpu\xffsyz0\x00\x1f9mzb~\\M\xd9^K>\xfa<\xeat\x0e\x91\x86\xc3\xf0Q\x9d\x92\x92\x19\x91\x96\x02UPg.\xdc\\\t\b{\x98wp\x92\xf9\xe3&\xc21\xa7~\xb7J\xed\xf2\xf4\xd1Un9\x1fj\x8f3\xf0!A\xb4\x99\x9cs\x83\xf3\x11Z\xf4\xa7\x12\x1a\x87,\x8c0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1349.674409][ T6641] ref_ctr_offset mismatch. inode: 0x43be offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x196) epoll_wait(r1, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x5, 0x9d7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000340)={0x10000, 0x35303553, 0x1, @discrete={0x8, 0x1}}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x1, @output={0x1000, 0x1, {0xa252, 0x4}, 0x5, 0x7fffffff}}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000300)={0x7, 0x32314247, 0x1, @stepwise={0x21e, 0x3, 0x2, 0x8001, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0xffffffe9) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000002c0)={0x3000, 0x8000}) fcntl$notify(r1, 0x402, 0xc) 23:39:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x400c630e}], 0x0, 0x0, 0x0}) 23:39:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xbd19) 23:39:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffe, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xae60, &(0x7f0000000000)) [ 1350.695331][ T6673] sp0: Synchronizing with TNC 23:39:33 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x400c630f}], 0x0, 0x0, 0x0}) 23:39:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x1a0ffffffff, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1351.124984][ T6674] sp0: Synchronizing with TNC 23:39:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x800}, 0x2) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xbd19) 23:39:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xae80, &(0x7f0000000000)) [ 1351.604667][ T6707] ref_ctr_offset mismatch. inode: 0x43bb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x7fff, 0x115000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000001c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x5, 0x2, 0x1, 0x7, 0x8000000000000, 0x5}, &(0x7f0000000140)=0x20) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) [ 1351.739177][ T6726] binder: BINDER_SET_CONTEXT_MGR already set [ 1351.887835][ T6726] binder: 6708:6726 ioctl 40046207 0 returned -16 23:39:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x12141e45, 0x1, 0x9, 0x9, 0x100}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000180)=0xfff) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x800) sendmsg$xdp(r3, &(0x7f00000023c0)={&(0x7f0000000240)={0x2c, 0x4, r4, 0x16}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000280)="4d4432625d9c8830e968d724a38405cd47f036f32a2a82cd592e9030df450810dbf3cf3a26420aa39f91fd72c0fc3d5400718e1e73ba2fb5", 0x38}, {&(0x7f00000002c0)="036eefb84f14e84c72e7d2953cb485905077630221497525bac1db7e1095ba602dd2912ed895a73a60ac50981a3a84d9105c9fc5c3e38da37890ca1a6ba63e3b423a2cc9d0a803d6b160390522d283880aa037ed331a80dacd789eb3579e52e1e137d45ea6848814d04a48b924734b0119abd995a8be71f530013f46757ee7e3db5a70da33d038b32a7c4220e093c978e123b0027b396c81b196f100759659a2d611542c311cc1d86f7fd964f741ec8d876315", 0xb3}, {&(0x7f0000000380)="2915834ab34d75239a0b991add56512cf138b795cc4cbe3305592063fb5e7d821a71046b1a2129242f8710911ee6842a94c9943f6924aeb8ce3c21b6a23659ae6d85e9cb8d71e700a89a780a38f816b504bdfd755d38e700c802a7d4c45d726e7f787f6309bb0cacdaa31d567dbdf6c95b8fac2fc7070b4dfb96262ce3498f8d8e850f492f31c8f5618ba299a1eb99de1386a9cb7cd1dfc1f7b0fd5f468ea15d8d01d8639d6f10b37954dd8037ebb9a718f3a6e489f7dce20ebd80e20ea3eed80e702044c5a171289ee51dafd662a4d9b7a1e6439b35accc7bafe92f36f5c4fcad7f7df2534801b12c5f78bf4f1fcb88f8e1528587257efa156f810c86878475b0781fa671302a39baa88bf5696bb2dc5ba6898a3bcf445007429f141e2276849f7f896acb14a0d0df25b7be7c8005032d24558c119a537694bec848720f91ab6d47f5c795bcfce412706c95b4d3f9749b4e58e6a4ada804945f41e8c79abab71e256e35f348f2dbad7baba17cfcaab7a1e1d61beb39a57583fe47a15c4a04e7ff4fbad7b1946139dd2b766c35f424825dc8ab5253d2d05af2d34c9ed6f5eb0a6c31f964fb32ac0275fa1fec1895a28aa9ffe9aaf9da249543cacb418259342fccd3b581639a8c97423c8f1110e73895126e1c70dde0dbf501ae41bd749945317d3031b05d07dbea07beea15f8069ec8d35fdfb7f7761a853937ffafac82394c62c559f038dfc4d1dcf6a6556a2c0b0c8a80c3686095a3763ad353658a122924d18ba7c9d1b14e2b33e29c0fee51f3ae38c9fbcc8baba76a49c04867c0f7ba7284dfbb468c8630ad196bcf1c75a32b5383ddc6cf2c8dfee87299d382620220238a1e980b3319d042102d7a1f3e18c7acf0d5ba3b82b27bf835cedea6fffa7ec528a64df13d145ed4fc948f6588e07599b1938f24fc604d2f76ffe218a28ea29208469439c33bd379f46bde8497edaaefc86aa6569ce33274041dcee3498b0421022963f2660686fe39612048fe792290be79037c896fe7882e6969735ba074c61b22b74ba2a5d53c81a347e3a80d7758b727fbad813dc9d39a041d30a49a632bcaabc27d27072994d917b7369a652a523f09aae3e715c1d28e5cd9b5f858051a7caac5880ad1bd415b578229c72febe1c5b7ce43fe7d7dcadb1d12d205b34ea02db6bb4f148c5dd4c9c17f97878c80b253d664426c0b81461c9a7756a3fa19dccca383370057c6b891fe8f3ded15de7cc914a9d4db7869d784af419941b49d662b7940855022825a1dec8c5b2705fdacea7d335f8b918bf293c4dd02751a8be2e0a75b24e0f8455fa0e39497ec9c033ee0602d38e76b3f67d93654a51e51a4c91537a09a9e8ebfe0efb0be4bdff442a503d9454e2c0b7b0afc80027d93036021df7950b411eaa9c5b4a4d59e678023d18fc6740b1e73ffc810cd421ed89318e48ab18bf7e02e3f3ecdb9f036c546240d2bb356bc584c9d6d5ea5583990ce94f626f58a0e7d74ad030f1d6eea9c31ee1889991ba268e6c7bff09d15f7c30d616811f7682c4bda678488c5320ad9a37b21ff0d6db3c52f11970bc9702c1ac0d9e378acc79d2130dd5d3dc3f0e283af07a35c8f0ce3cda4cd018be463194f1739b00871dd7a8529a49dba21bf30ea3563d5302745cb31f88dcb1a65544d52e277828ca5c4c0e5bc3ea55e62e152a5a16d0fc0a77688b1dee0b7f87465f79a0cbf8d5d796c6151b7ae5095535592bee5fe949ecf73224c1986f4aece57bd455eba6b4b50ca82638ae0789f8ce68b5d089c12b56e9d4c155f1a1fc496bd782d0a122b1823003846f2ecf434ee52d90b8383e14f310827da12a2445b9b9d3ac1c96827378ea6bcc2df4ad6ce7fed57b3b25e536f2972137e65fddb6d7890c98b10f8093b40e4bd483d2349633780bd053b6618900da5ea6914ad0189a6f6d6a43dcf46cdc28b94bbefc3eaaec2000b91441319ec228fafb3e2026bba1778e93a88c9834e221717b58ae629590e0e2b493bf8ff68d7b5dbf802f47fbaccf4c4e339d6918beb7659588ecc578d9afddbdad394ca59f1e830cb66025b3fd5b9844cbe7d39b243df77e0789672b587b1520d798989a2074d47d9bb8f3300d7ed97475b4c290edf55c345ce74a3e03a297ec3420ba4e87eaf5514ef7d733d7c8e5ba5e9eb7db911937d445abebb02592da9143148f38c455be7a38659c62a8894702ab04d9818efcba7b699f292f419e67c2e046f6b007cddd3c83dea4757d1fc815a14d43ecdc0de84fe272ab1804217f849aee287d0af4c033047053317a55659511d1ff0ca1b048518a9527abb79dcbb1dc84bfafa237ee3e0585c229007fc90da263b390e77310d2460e612892801141a29a0521d69c47ffd7d4ad6c76e05d238aaa409f6d00300b65f877c45edd7cd685f5bd69ff89f3b886925d720fec6179bb3b70d77218f0a60a9c4401f30b73c335362dac9bf27ac1bae79225619a10169472991fb7f81d2717e584954bf07d7cdaa307c5053aa87bbd39a8e0934887c613ac5974aac3e95125294dbd61ecf34fd13f8ab253099445b2512b72f6851c8b6d3bfa66df9a6ad9f52d6ee1a801a52562945ec688b1217c03d8ea0614cd72cdbe86fbabccaff405da8b689d43e5c5a8af6268aad6a0cf3e31947ef473dba45035bdafbabd0e892f51d3b3922697e62ddd4ff6e22d242df97bbedad1658b49e8586f08289a0df41c32b2f2ba17e5eaf43397aaa62808aaf72213c538b1af18c251233db9301260cbd21c6ae0e472b0a0d9fc234169bbb6d15636110223bc47c0b37a528982a8d5a2a4c54d4992109585cafcca32f07d042ed62147e579719f2c5fdd7b0fce0d6dc3701d7d2306544eb3c62469268b05b79d565fd13164984eb11a33bbc68c7ad0215872a27290610624ff6041e8932dc0afc14aed4b18fa31cf37a4dabef05a77abcf297c83fe1ba5e413f5c61adba4180682e85d6c5071862aea25254cbbd4e57e535e16edb8acb9a6ee78d58396c201330db1cf306639902447574e09b40e8514ea1d44a4975e6cf764c4f664106b88b184fe466c2b6daa9132a6c175ded79f9798a4de2c7fdd5e2a2f4f2f0fe6673a87fad7387fc9effb8c31777476a400489d69dd2bc96a2133a3b089a048bdf055754c355dd5364a17c282c8f8d4f1a20d31667de1d8afff7e1455632a04b170e6eb2876ee4db96b1e37f97e8da1b6114f4a3d4759ea759ac331c664ff419c160d45982d79e4035377d95e06b3c626cb111d95ce24301ed16ed4a6c79dbb40703366c3b5f4b25f01eac1506037c3f183d3db4c055cd0469ccd6705554166a16b2c3283515eee1e0e224a56bd157e02f8db2fec178da96cddfe50cdf1fa3a77644092b80c3eaa363062cd4337ed70578023266c4b7f212d59796163d20991035844476605803b29a3d9da236f2bc5fe7b357ddef3efee6dd0930d25816d4a36f043a36072baf2e9e29b0cb11afaebbfda7d151353647c559f889afe9a224b27734e7a21e8c1af951e81696150445d57371fb7490fd7746d2c67e51279ab15f92fab88f0315f5753e9d7d6735d8bb402b58d19ae2b20f623a45f51dfa424b5ba6108616df2800b898e6d2465041e3f640cd1df51f30e6e66c40441c581581d81ed9c6753a6c057fc66a2224f094120542612e82c010f96c2f497a5be2aa3383105a2b9fc93fac651e5c91d3480550f741f2e9c40007455326cb1e86ecfd3a083ba86218fcd58e231ab8f088489b876b55795a9155a7edf0b3c55622d952080ae283fe4714996882b5f18b1163e80f9fb8af41360e2897e46cf97fddff979f77a1681c8563c50406fe3fb7d325ace292f2c7ea6f17750739f93898985869e91bdb10d7ad6d293cab5f5c3cff23c93e659ac882887668d58fe0205f62e67c454c8dff8a4a58f6bf2e217cd9a9be3ff89fd88b7343dde6dcf24b203f725a25d722b4d3d77e0d69afad62f2080d9442ac8b5f2fe723e89bbea3ccd321dbe054cdc2fc9722e14afd844a87e96870ace5649cf9f2f02e5358f60476a8af785790e02913b014b5f1a5ec8f1e13c91143bcc5949805fdff1567e606115178f7233c1f1157154b6c9c9f487b8aa361fff22960a6ba4c82bffa3fd67c3a07035d01234f8e6e8be596f0a1cdde0e5fdb5d25559220481f37bf9ce19ed24e8c62e0657a5326517bd8764bfc0a78c6919feaae5778ce045367ddfe3d5bd1e5e34c96f2c95458d7fcf26a3301196a40260dcc16306e621d0e779c64603b1242f6727a1fbdda73e9de3fe3e17a1a70cd7dc39554a3dc2d00e5dd798857dc9c37514f32c093e268a312c27a6f8c147b1cfcec512208e0d4c985250db5552e09a6eba2f2afb9f424c047d105b00294108be26a37df26294134f70cb2dec2445711063a8f0b5d44f797b281f34448cd35a1f410e45113d10b82e54bf668010826d41330c3538e176ba41e1bdc2715207fede498c83906335fdf750b6b9c8285b4bbcfbfb91474027e8081c1bd2cffbe9de65c2cf4f2142992f09c0ea6a6e90dfc2789bbbd0859d9a27a73be00ff4946bc2edf60aae6b67195183b40d87e91503144e5188be7e860b377676c63b28d61768ad66c94317a34aad1328d481220f2cd309749e71e1e3a50e51c558b36cde2f104ce07d6622f5c92232b154d0c795e876a4d5ac22df41a7d951c6b403f8c5ddbdcee2575dfa225d4308e81d9f076c50eb4b59445ba0b24bce5a1329236f2008e65e3eac6bced1f8fec42d0486d86927431eb4550b42473b741bf4265a89df065d3eaaff9cf04fd1d820af55ed9213b1956e1666a0a283585df5a63585f18ae6a19dc20c505001a779b8c420477e6b8ec530fbf791c06c830f60156566921cd0d9e243f6b9f7811fb7070b015152304354596d58385d23e3d430452004c93782c0ff19bfe7aceed71a77872d468e650580ea6d683e705c7c9ab64a7dd77c70cdad4a5e40ab5488f1a00f92667a3890a9b7d8d336eb88109a236b7c97ee9dfff012d0cf46e3cb13f826f1ddcf26dd49f307d66ae6c51b656ae0dfca1614916f125180938091aa5c21ed1fcf9697e9b5e43bf2885183e34fbfdd023f8b5db0ae10635c181ab75296d42ca5d3e97f372044384d85d0a849661086d2b25b1c288f660f2f48199f39051739c1e38cabc853a27b7231d6f8cb16ca02f448565eaee9d581542328973eafdff0b046719ae8e225556bbcfd07ffa24dbbe6d91f2070cf744cebd469e9f4648fd2702b43419ad78de13d8b44bc9e36fa8aef164f45ee358a62a557a269756ddc0228efabb0154b94d3f3fb4ee8d92399290c2559ae988653d3ca66f0f8a1a65a73eb6d0445ffd7bc8aa945ff87eb7c60f9bc2b753676226f1f8aa822582e213f93f445d7067f7db268be8c9fdc71653b9f52e1ddb3cb491cd0fde109523c34b6ee94ed420f29a47360a319520f17a583a863d60acf6df11e81a2bbdb79272decd305e6b0bd6ced7129d7ea8a0cab07a535e1fe87464d56308118bafc03ae12985338378312a210f61ae4cb7ae8e0d0de790075f78571a601616dc98fc12b2869d2eb11e75dbb0fd510daa88ed9497a6e3a03e979e0baf1c883941818bbe9e89111d8eb5ff799a80282f130dfac313fd89bc69675cd209134cc9c2d1834fc600f2b2a3503e169afcae8790bf844eccdcbd1b86e75ad3afbfd2296005baefa809d51ed2c6cc81a174b94cfc208b16534a5ba9940d39652d0a1aedea00fe718fb237804cd7cc766b976b87cd2e07f8c01f57fd9144a903e023eb1726e744cbb587", 0x1000}, {&(0x7f0000001380)="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", 0x1000}], 0x4, 0x0, 0x0, 0x40040}, 0x4) sendfile(r2, r3, 0x0, 0xbd19) 23:39:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40106308}], 0x0, 0x0, 0x0}) [ 1352.320918][ T6738] sp0: Synchronizing with TNC [ 1352.530488][ T6740] sp0: Found TNC 23:39:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x40045431, &(0x7f0000000000)) 23:39:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:35 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1352.932028][ T6738] sp0: Synchronizing with TNC 23:39:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40106309}], 0x0, 0x0, 0x0}) [ 1353.056439][ T6742] sp0: Found TNC [ 1353.137502][ T6769] ref_ctr_offset mismatch. inode: 0x41c1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x1ff) 23:39:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x400454ca, &(0x7f0000000000)) 23:39:36 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="3802fc790020632a659aae4fbaad07e818d11c80b9b78e37805956d214f093c14b89e48d279f0a5e", @ANYRES16=r1, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000002c0)={0x0, @reserved}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = getpgrp(0x0) wait4(r5, &(0x7f0000000780), 0x80000001, &(0x7f00000007c0)) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000380)=0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000200)=0xffffffe9) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000040)={0xc111, 0x4, 0x4, 0x3, 0x7}) 23:39:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40406300}], 0x0, 0x0, 0x0}) 23:39:36 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2630feff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1354.045690][ T6798] sp0: Synchronizing with TNC 23:39:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) sendfile(r1, r2, 0x0, 0xbd19) 23:39:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1354.266953][ T6810] sp0: Found TNC 23:39:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000000)) 23:39:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40406301}], 0x0, 0x0, 0x0}) [ 1354.589513][ T6829] ref_ctr_offset mismatch. inode: 0x41b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) 23:39:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x53, "45cdb9ed313c2713a1b6d4f20c309feb1fef4fe1ad60a4c6a3643ba2149ba6aa27491f5503a7205568e4ea351a56a19df826df4274f11e5bb6203177f62a5f286b806103c484184ab6a267f94eb8f0abaaab03"}, &(0x7f0000000080)=0x5b) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0xffffffff}, &(0x7f0000000200)=0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1355.022289][ T6840] mkiss: ax0: crc mode is auto. [ 1355.045766][ T6820] ref_ctr_offset mismatch. inode: 0x41b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40486311}], 0x0, 0x0, 0x0}) [ 1355.367918][ T6840] mkiss: ax0: crc mode is auto. [ 1355.550597][ T6856] sp0: Synchronizing with TNC 23:39:38 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000080)={0x59, &(0x7f0000000000)="fc12bbb6b49ed4cc7997dc3f269cd07ce733f13468483cb8550d72a3daf9cb0497c983a629c2c7cfd4397957360290f878fdbf80c0899d909ca325dc10ee414123ab1a878f12a782ac13d20cd20a23735cddb373dec74bc75f"}) sendfile(r1, r2, 0x0, 0xbd19) 23:39:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40486312}], 0x0, 0x0, 0x0}) 23:39:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f0000000000)) 23:39:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x82002, 0x0) [ 1356.286095][ T6897] ref_ctr_offset mismatch. inode: 0x40f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='huget\x00b.2\xd9\xc8\xab\xb6\x03\xbb\xa2\x05\xae\xc5g', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x0, r3, 0x48b5) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x0, 0x5}) 23:39:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x2, 0x0, 0x0}) 23:39:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1356.850478][ T6921] sp0: Synchronizing with TNC 23:39:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x40087602, &(0x7f0000000000)) [ 1356.968153][ T6930] binder: 6923:6930 ioctl c0306201 20000080 returned -14 [ 1357.029427][ T6925] sp0: Found TNC 23:39:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00'}, 0x45c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) sendto$x25(r1, &(0x7f0000000180)="d249063d", 0x4, 0x40c0, &(0x7f00000001c0)={0x9, @remote={[], 0x3}}, 0x12) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) tgkill(r4, r5, 0x10) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8000, 0x7fff, 0x5120700b}) r6 = openat$cgroup_ro(r0, &(0x7f0000000200)='G\xb3\x85my\xc7', 0x0, 0x0) bind$isdn(r6, &(0x7f00000000c0)={0x22, 0x4, 0x101, 0x5, 0xffffffffffff0000}, 0x6) fcntl$addseals(r0, 0x409, 0x3) sendfile(r3, r6, 0x0, 0xbd19) [ 1357.336227][ T6941] binder: 6923:6941 ioctl c0306201 20000080 returned -14 [ 1357.509344][ T6940] mkiss: ax0: crc mode is auto. 23:39:40 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 23:39:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xbd19) openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 23:39:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x3, 0x0, 0x0}) 23:39:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4008ae89, &(0x7f0000000000)) 23:39:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x1001000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1358.593360][ T6980] binder: 6979:6980 ioctl c0306201 20000080 returned -14 23:39:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4008ae90, &(0x7f0000000000)) 23:39:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x100010003) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x10) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000107, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x51) semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f0000000480)=""/127) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11009}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80)) r7 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000300)={0x0, 0x4, [{r4, 0x0, 0x2000, 0x1000}, {r1, 0x0, 0x1000000, 0x1000}, {r3, 0x0, 0x0, 0x100000000}, {r4, 0x0, 0xfffff000, 0x1000000000000}]}) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) r8 = openat$cgroup_ro(r0, &(0x7f0000000380)='cp\x00\x00\x00\x00\x00\x00\x00\x00_mems\x00\xa7\xf8&\x16+\xe2YD\xbe<9\x8d\x00\xf08\xc3\x8a\x9a\x83\x99\x9d\xeci\x86\x7fAeYZ\xdc;\xd0\x04\xb7\xec\xdc\xbb3Z\xb6@\xf6\xeb46*\x1d\xf1>\xb9\x19\'Mc\xa2n\xc2\xc4\x88m\xbaS\x87\r\x83sSp\xd6\r\x9f$\xca\x1e\x00\x91&\xe3\xcd\x86\xfb\xf9j8\xcf\x11u\x05Ox\xe9\xdb,\xc9\x8e\x19\x9b\x042\xdc\xc37\x80\xb1\xa4\xabO\x00\x06\xa4\xc0\xc7\xe7\x11\xa1S\x03\xd6\x9d:\xf5r\x89\xb0\xc5\x15x\xa2\xeaFP3\x15\xcb~X>\x9aL}R\xc0\xdc\x87-\xd4\x88\x1bR\arQ\xaf\xac\xae\xf0\x1e\xc60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1359.374979][ T7007] ref_ctr_offset mismatch. inode: 0x42c1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x4, 0x0, 0x0}) 23:39:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x400c4301, &(0x7f0000000000)) 23:39:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa3349a104260d6c0, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000180)) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x400}}, 0x18) 23:39:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x8004000000000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = openat$cgroup_int(r0, &(0x7f0000000180)='notify\xc9\x80/{?\x11\x9e\x1f\x7f\x1f\xef\xa8\xcb\xbb\x8c\xcaJ\x7fw\x99\xcf\xae\x8bI\xa0_s\xaeL\xf3\xc1[utk\xbfc:\xfdf\xf8{Y2H`\x84Sl\xb1\x0e=\x841\x1b\xff\xd4\x170xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xfcfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x5, 0x0, 0x0}) [ 1360.613539][ T7050] sp0: Synchronizing with TNC [ 1360.714147][ T7056] sp0: Found TNC 23:39:43 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1360.987751][ T7074] binder: 7070:7074 ioctl c0306201 20000080 returned -14 23:39:43 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x70, 0x3, 0x10001, 0x401, 0x24a, 0x0, 0xfffffffffffffff7, 0x20, 0x8, 0x9, 0x9, 0x5, 0x9, 0x3, 0x40, 0x1, 0x100, 0x1, 0x9, 0x5f, 0x6e4, 0x3, 0x1, 0x7, 0x8001, 0x3, 0x5, 0x1, 0x40, 0xffffffff, 0xab, 0x609, 0x363c, 0x315f, 0x2, 0x6, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x8, 0x4, 0x33, 0x0, 0xfffffffffffffff7, 0x7fff, 0x101}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(r0, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd19) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x401, 0x0) lseek(r2, 0x0, 0x7) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000080)={0x9, 0x73b, 0x57eab4e, 0x2}) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000000)) 23:39:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4010ae94, &(0x7f0000000000)) 23:39:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xfeffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1361.201403][ T7083] binder: 7070:7083 ioctl c0306201 20000080 returned -14 23:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x12) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1361.489251][ T7085] ref_ctr_offset mismatch. inode: 0x40d2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x6, 0x0, 0x0}) [ 1361.639540][ T7095] mkiss: ax0: crc mode is auto. [ 1361.760132][ T7098] sp0: Synchronizing with TNC 23:39:44 executing program 0: [ 1361.871937][ T7102] sp0: Found TNC [ 1361.891839][ T7085] ref_ctr_offset mismatch. inode: 0x40d2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1362.126183][ T7120] binder: 7107:7120 ioctl c0306201 20000080 returned -14 23:39:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4010aeab, &(0x7f0000000000)) [ 1362.304635][ T7129] binder: 7107:7129 ioctl c0306201 20000080 returned -14 23:39:45 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0x81) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:45 executing program 0: 23:39:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffa0010000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x7, 0x0, 0x0}) [ 1362.771077][ T7138] mkiss: ax0: crc mode is auto. 23:39:45 executing program 0: [ 1363.063304][ T7146] ref_ctr_offset mismatch. inode: 0x4242 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1363.198560][ T7157] binder: 7156:7157 ioctl c0306201 20000080 returned -14 23:39:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x2, 0x8}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1363.380594][ T7164] binder: 7156:7164 ioctl c0306201 20000080 returned -14 23:39:46 executing program 0: 23:39:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1363.588816][ T7138] mkiss: ax0: crc mode is auto. 23:39:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x1a0, 0x0, 0x0}) 23:39:46 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000000)) 23:39:46 executing program 3: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1364.171077][ T7194] binder: 7192:7194 ioctl c0306201 20000080 returned -14 23:39:46 executing program 0: [ 1364.388450][ T7194] binder: BINDER_SET_CONTEXT_MGR already set [ 1364.408175][ T7195] ref_ctr_offset mismatch. inode: 0x4352 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1364.494169][ T7194] binder: 7192:7194 ioctl 40046207 0 returned -16 23:39:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4020ae46, &(0x7f0000000000)) [ 1364.633089][ T7198] binder: 7192:7198 ioctl c0306201 20000080 returned -14 23:39:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1364.786183][ T7205] sp0: Synchronizing with TNC [ 1364.786369][ T7191] ref_ctr_offset mismatch. inode: 0x4352 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1364.879083][ T7207] sp0: Found TNC 23:39:47 executing program 0: 23:39:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x300, 0x0, 0x0}) 23:39:47 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x501000) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x17) sendto$rose(r0, &(0x7f00000001c0)="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", 0xfd, 0xc0, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @null}, 0x1c) r2 = dup2(r1, r1) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xffffffe9) recvfrom$rxrpc(r2, &(0x7f0000000040)=""/111, 0x6f, 0x2000, 0x0, 0x0) 23:39:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1365.354201][ T7226] binder: 7225:7226 ioctl c0306201 20000080 returned -14 23:39:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4090ae82, &(0x7f0000000000)) 23:39:48 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1365.527054][ T7226] binder: BINDER_SET_CONTEXT_MGR already set 23:39:48 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400240, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xbd19) [ 1365.717864][ T7226] binder: 7225:7226 ioctl 40046207 0 returned -16 [ 1365.842686][ T7233] binder: 7225:7233 ioctl c0306201 20000080 returned -14 [ 1365.968589][ T7248] ref_ctr_offset mismatch. inode: 0x43d1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4138ae84, &(0x7f0000000000)) 23:39:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x500, 0x0, 0x0}) 23:39:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080), 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1366.477835][ T7265] binder: 7264:7265 ioctl c0306201 20000080 returned -14 23:39:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000000)) 23:39:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x4400ae8f, &(0x7f0000000000)) [ 1366.668647][ T7265] binder: BINDER_SET_CONTEXT_MGR already set [ 1366.688144][ T7267] sp0: Synchronizing with TNC 23:39:49 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1366.743874][ T7265] binder: 7264:7265 ioctl 40046207 0 returned -16 [ 1366.820393][ T7269] sp0: Found TNC 23:39:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x600, 0x0, 0x0}) [ 1367.072811][ T7286] mkiss: ax0: crc mode is auto. [ 1367.184589][ T7269] sp0: Synchronizing with TNC [ 1367.354949][ T7290] mkiss: ax1: crc mode is auto. [ 1367.476080][ T7316] binder: 7309:7316 ioctl c0306201 20000080 returned -14 23:39:50 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x110, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x115000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x80045430, &(0x7f0000000000)) 23:39:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x700, 0x0, 0x0}) 23:39:50 executing program 0: mknod(&(0x7f00000001c0)='./file0\x00', 0x200001040, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3e) recvfrom$unix(r2, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1368.275798][ T7342] ref_ctr_offset mismatch. inode: 0x4153 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1a0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1368.454279][ T7352] binder: 7349:7352 ioctl c0306201 20000080 returned -14 23:39:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000000)) [ 1368.620474][ T7358] binder: 7349:7358 ioctl c0306201 20000080 returned -14 [ 1368.708067][ T7356] sp0: Synchronizing with TNC [ 1368.726086][ T7355] sp1: Synchronizing with TNC [ 1368.733368][ T7362] sp1: Found TNC [ 1368.812818][ T7357] sp0: Found TNC 23:39:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x4000, 0x0, 0x0}) [ 1369.122671][ T7373] mkiss: ax0: crc mode is auto. 23:39:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:51 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:51 executing program 0 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1369.422262][ T7391] binder: 7385:7391 ioctl c0306201 20000080 returned -14 23:39:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x0, @empty}, &(0x7f0000000140)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000300)={r2, 0x2, 0x800, 0x4, 0x9, 0x400, 0x7f}) [ 1369.651808][ T7391] binder: BINDER_SET_CONTEXT_MGR already set [ 1369.824477][ T7391] binder: 7385:7391 ioctl 40046207 0 returned -16 23:39:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000000)) 23:39:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x480, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1369.911433][ T7412] ref_ctr_offset mismatch. inode: 0x43e0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1369.944675][ T7406] binder: 7385:7406 ioctl c0306201 20000080 returned -14 23:39:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1370.228700][ T7414] sp0: Synchronizing with TNC 23:39:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x1000000, 0x0, 0x0}) [ 1370.316236][ T7419] sp0: Found TNC [ 1370.455788][ T7423] mkiss: ax0: crc mode is auto. 23:39:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x3a, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1370.734825][ T7442] binder: 7433:7442 ioctl c0306201 20000080 returned -14 23:39:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1370.855843][ T7446] binder: 7433:7446 ioctl c0306201 20000080 returned -14 23:39:53 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:53 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x2000000, 0x0, 0x0}) 23:39:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1371.510150][ T7464] ref_ctr_offset mismatch. inode: 0x43ec offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x800454d2, &(0x7f0000000000)) [ 1371.575690][ T7467] binder: 7466:7467 ioctl c0306201 20000080 returned -14 23:39:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1371.721609][ T7465] sp0: Synchronizing with TNC [ 1371.795961][ T7478] binder: 7466:7478 ioctl c0306201 20000080 returned -14 [ 1371.839748][ T7472] sp0: Found TNC [ 1372.081979][ T7486] mkiss: ax0: crc mode is auto. 23:39:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:39:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:54 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe603000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x3000000, 0x0, 0x0}) 23:39:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x80086301, &(0x7f0000000000)) 23:39:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:39:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1001, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}], 0x2, 0x7, &(0x7f0000000140)={0x6}, 0x8) write$P9_RVERSION(r1, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1373.234980][ T7527] binder: 7512:7527 ioctl c0306201 20000080 returned -14 23:39:55 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1373.396828][ T7536] binder: 7512:7536 ioctl c0306201 20000080 returned -14 23:39:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:39:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000000)) [ 1373.667210][ T7538] sp0: Synchronizing with TNC 23:39:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1373.775211][ T7540] sp0: Found TNC 23:39:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x4000000, 0x0, 0x0}) [ 1374.037545][ T7547] ref_ctr_offset mismatch. inode: 0x43fd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1374.095142][ T7553] mkiss: ax0: crc mode is auto. [ 1374.138654][ T7538] sp0: Synchronizing with TNC [ 1374.245371][ T7567] binder: 7562:7567 ioctl c0306201 20000080 returned -14 23:39:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:39:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x8004, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1374.406510][ T7576] binder: 7562:7576 ioctl c0306201 20000080 returned -14 [ 1374.525931][ T7544] ref_ctr_offset mismatch. inode: 0x43fd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:39:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x80087601, &(0x7f0000000000)) 23:39:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)=0x3) 23:39:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x5000000, 0x0, 0x0}) 23:39:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x7, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1375.318234][ T7601] binder: 7597:7601 ioctl c0306201 20000080 returned -14 [ 1375.355530][ T7598] mkiss: ax0: crc mode is auto. 23:39:57 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1375.498727][ T7601] binder: BINDER_SET_CONTEXT_MGR already set 23:39:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x8, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:39:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000001c0)=0x7, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000080)={0x1, 0x4, [0x8000, 0x39, 0x9, 0x4], 0x2}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)={0x6, 0x1}) [ 1375.637928][ T7601] binder: 7597:7601 ioctl 40046207 0 returned -16 23:39:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:39:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x6000000, 0x0, 0x0}) 23:39:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x8008af00, &(0x7f0000000000)) [ 1376.180033][ T7631] sp0: Synchronizing with TNC [ 1376.226025][ T7623] ref_ctr_offset mismatch. inode: 0x40a2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1376.388404][ T7634] sp0: Found TNC 23:39:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0xb, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1376.458563][ T7645] binder: 7637:7645 ioctl c0306201 20000080 returned -14 23:39:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1376.655896][ T7659] binder: 7637:7659 ioctl c0306201 20000080 returned -14 [ 1376.828241][ T7649] mkiss: ax0: crc mode is auto. 23:39:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x7000000, 0x0, 0x0}) 23:39:59 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:39:59 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$TCGETX(r0, 0x5432, &(0x7f00000001c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ioprio_set$pid(0x0, r2, 0x800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:39:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:39:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x80247009, &(0x7f0000000000)) 23:39:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1377.446007][ T7686] binder: 7679:7686 ioctl c0306201 20000080 returned -14 [ 1377.536641][ T7682] ref_ctr_offset mismatch. inode: 0x4409 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1377.644923][ T7697] binder: 7679:7697 ioctl c0306201 20000080 returned -14 23:40:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x40000000, 0x0, 0x0}) 23:40:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) fsetxattr(r0, &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)='\x00', 0x1, 0x2) 23:40:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x8138ae83, &(0x7f0000000000)) 23:40:00 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1378.244833][ T7707] binder: 7705:7707 ioctl c0306201 20000080 returned -14 [ 1378.440347][ T7718] binder: 7705:7718 ioctl c0306201 20000080 returned -14 [ 1378.550920][ T7720] sp0: Synchronizing with TNC 23:40:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1378.639616][ T7724] mkiss: ax0: crc mode is auto. [ 1378.694829][ T7722] sp0: Found TNC 23:40:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1378.744791][ T7725] ref_ctr_offset mismatch. inode: 0x4420 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1379.229360][ T7720] sp0: Synchronizing with TNC 23:40:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0xa0010000, 0x0, 0x0}) 23:40:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)) 23:40:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x13, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:02 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1379.699263][ T7763] binder: 7762:7763 ioctl c0306201 20000080 returned -14 [ 1379.900692][ T7774] mkiss: ax0: crc mode is auto. [ 1379.945111][ T7769] binder: 7762:7769 ioctl c0306201 20000080 returned -14 23:40:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x10010000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1380.050268][ T7782] ref_ctr_offset mismatch. inode: 0x4427 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0xfdfdffff, 0x0, 0x0}) [ 1380.336819][ T7791] sp0: Synchronizing with TNC 23:40:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)) [ 1380.489207][ T7794] sp0: Found TNC [ 1380.804999][ T7811] binder: 7806:7811 ioctl c0306201 20000080 returned -14 23:40:03 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1380.948100][ T7791] sp0: Synchronizing with TNC [ 1380.966295][ T7820] binder: 7806:7820 ioctl c0306201 20000080 returned -14 [ 1381.029722][ T7793] sp0: Found TNC 23:40:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x15, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0xfffffdfd, 0x0, 0x0}) 23:40:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc008ae05, &(0x7f0000000000)) 23:40:04 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3a0f2dbd7000fbdbdf250e000008000600fe0100000800050002000000100010000c000707040000002000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/member\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1381.585050][ T7831] ref_ctr_offset mismatch. inode: 0x442a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x80040000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1381.867274][ T7851] binder: 7847:7851 ioctl c0306201 20000080 returned -14 23:40:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1382.075453][ T7850] mkiss: ax0: crc mode is auto. [ 1382.082052][ T7851] binder: BINDER_SET_CONTEXT_MGR already set [ 1382.200918][ T7857] sp0: Synchronizing with TNC [ 1382.261732][ T7851] binder: 7847:7851 ioctl 40046207 0 returned -16 [ 1382.371896][ T7865] sp0: Found TNC 23:40:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xa0010000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1382.464233][ T7861] binder: 7847:7861 ioctl c0306201 20000080 returned -14 23:40:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000000)) 23:40:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x1a0ffffffff, 0x0, 0x0}) 23:40:05 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1382.994715][ T7865] sp0: Synchronizing with TNC [ 1383.145647][ T7865] sp0: Found TNC 23:40:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfcfdffff, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1383.214938][ T7897] binder: 7896:7897 ioctl c0306201 20000080 returned -14 23:40:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1383.354229][ T7900] ref_ctr_offset mismatch. inode: 0x41a2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc018aa3f, &(0x7f0000000000)) [ 1383.415117][ T7904] binder: 7896:7904 ioctl c0306201 20000080 returned -14 23:40:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfeffffff, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x100000000000000, 0x0, 0x0}) 23:40:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x19, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1384.058441][ T7925] mkiss: ax0: crc mode is auto. [ 1384.259915][ T7936] sp0: Synchronizing with TNC [ 1384.300158][ T7944] binder: 7930:7944 ioctl c0306201 20000080 returned -14 23:40:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1384.476564][ T7939] sp0: Found TNC [ 1384.590725][ T7951] binder: 7930:7951 ioctl c0306201 20000080 returned -14 23:40:07 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1a, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1384.831917][ T7939] sp0: Synchronizing with TNC 23:40:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000000)) 23:40:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x200000000000000, 0x0, 0x0}) 23:40:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffe, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1385.371775][ T7972] ref_ctr_offset mismatch. inode: 0x40b2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1385.589611][ T7986] binder: 7985:7986 ioctl c0306201 20000080 returned -14 [ 1385.705752][ T7987] mkiss: ax0: crc mode is auto. [ 1385.718684][ T7967] ref_ctr_offset mismatch. inode: 0x40b2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x8000000007) ioctl$KDMKTONE(r0, 0x4b30, 0x8a91) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1385.853188][ T7993] binder: 7985:7993 ioctl c0306201 20000080 returned -14 23:40:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1a0ffffffff, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc020aa00, &(0x7f0000000000)) 23:40:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x300000000000000, 0x0, 0x0}) 23:40:09 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x119001, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x10001, 0x3b, 0x0, 0x2, 0x4, 0x5221, 0xfffffffffffffc00, 0x3, 0x45fa10c6, 0xffffffff, 0x10000, 0x3, 0x3ad4cd4f, 0x2, 0x2, 0x10}}) [ 1386.885980][ T8032] binder: 8026:8032 ioctl c0306201 20000080 returned -14 23:40:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc080aebe, &(0x7f0000000000)) [ 1387.104592][ T8040] binder: 8026:8040 ioctl c0306201 20000080 returned -14 [ 1387.124601][ T8034] ref_ctr_offset mismatch. inode: 0x42f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1387.261741][ T8038] sp0: Synchronizing with TNC [ 1387.419254][ T8048] sp0: Found TNC 23:40:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x400000000000000, 0x0, 0x0}) [ 1387.634515][ T8054] mkiss: ax0: crc mode is auto. 23:40:10 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1388.035350][ T8071] binder: 8067:8071 ioctl c0306201 20000080 returned -14 23:40:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x200000) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 23:40:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0xc0d05605, &(0x7f0000000000)) 23:40:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x21, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1388.352807][ T8085] binder: 8067:8085 ioctl c0306201 20000080 returned -14 [ 1388.379529][ T8079] ref_ctr_offset mismatch. inode: 0x42a1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1388.656559][ T8088] sp0: Synchronizing with TNC 23:40:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x500000000000000, 0x0, 0x0}) [ 1388.813335][ T8090] sp0: Found TNC [ 1389.041591][ T8096] mkiss: ax0: crc mode is auto. [ 1389.099738][ T8100] binder: 8099:8100 ioctl c0306201 20000080 returned -14 23:40:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x1) 23:40:11 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1389.364972][ T8105] binder: 8099:8105 ioctl c0306201 20000080 returned -14 23:40:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 23:40:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x600000000000000, 0x0, 0x0}) [ 1389.985050][ T8141] ref_ctr_offset mismatch. inode: 0x4322 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1390.224194][ T8146] mkiss: ax0: crc mode is auto. 23:40:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$TIOCEXCL(r0, 0x540c) 23:40:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1390.394914][ T8150] binder: 8149:8150 ioctl c0306201 20000080 returned -14 [ 1390.606937][ T8155] binder: 8149:8155 ioctl c0306201 20000080 returned -14 23:40:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3) 23:40:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x24, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1390.897604][ T8170] sp0: Synchronizing with TNC [ 1390.902391][ T8173] sp0: Found TNC 23:40:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x700000000000000, 0x0, 0x0}) 23:40:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:13 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1391.415911][ T8195] binder: 8189:8195 ioctl c0306201 20000080 returned -14 23:40:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2a, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4) [ 1391.725396][ T8205] binder: 8189:8205 ioctl c0306201 20000080 returned -14 [ 1391.998067][ T8204] ref_ctr_offset mismatch. inode: 0x4331 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x4000000000000000, 0x0, 0x0}) 23:40:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1392.235599][ T8216] sp0: Synchronizing with TNC [ 1392.308763][ T8222] mkiss: ax0: crc mode is auto. [ 1392.335581][ T8220] sp0: Found TNC 23:40:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2b, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1392.605995][ T8236] binder: 8226:8236 ioctl c0306201 20000080 returned -14 [ 1392.778418][ T8242] binder: 8226:8242 ioctl c0306201 20000080 returned -14 23:40:15 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@bcast, @null, @bcast, @remote, @netrom, @null, @null, @netrom]}, &(0x7f0000000080)=0x48) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4) 23:40:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2c, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0xfdfdffff00000000, 0x0, 0x0}) 23:40:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 1393.575525][ T8263] sp0: Synchronizing with TNC [ 1393.614295][ T8272] binder: 8264:8272 ioctl c0306201 20000080 returned -14 [ 1393.651598][ T8265] ref_ctr_offset mismatch. inode: 0x4438 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1393.772501][ T8277] binder: 8264:8277 ioctl c0306201 20000080 returned -14 [ 1393.797046][ T8271] sp0: Found TNC 23:40:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2d, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1001000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1394.101844][ T8281] mkiss: ax0: crc mode is auto. [ 1394.182812][ T8263] sp0: Synchronizing with TNC 23:40:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0xffffffffa0010000, 0x0, 0x0}) [ 1394.336221][ T8271] sp0: Found TNC 23:40:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6) 23:40:17 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:17 executing program 3: setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000180)=0x1f, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0x9, 0x3, 0x8, 0x40, 0x2, 0x986, 0x9, 0xff, 0x8, 0x3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) prctl$PR_SVE_GET_VL(0x33, 0x1685f) [ 1394.834388][ T8321] binder: 8305:8321 ioctl c0306201 20000080 returned -14 [ 1395.039957][ T8313] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.192020][ T8317] ref_ctr_offset mismatch. inode: 0x4341 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1395.256952][ T8321] binder: 8305:8321 ioctl c0306201 20000080 returned -14 23:40:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2f, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1395.347759][ T8331] mkiss: ax0: crc mode is auto. [ 1395.424776][ T8313] binder: 8305:8313 ioctl 40046207 0 returned -16 [ 1395.431948][ T8333] sp0: Synchronizing with TNC [ 1395.498763][ T8343] sp0: Found TNC 23:40:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x8004000000000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x2, 0x0}) 23:40:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x7) 23:40:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x30, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:18 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfcfdffff00000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000180)={0x0, 0x2, 0x4, [], &(0x7f0000000140)=0x2}) ioctl$void(r1, 0x6f29ffb6e6097689) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x4001, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x7, 0x1000, 0x3ff, 0xffffffff, 0x5}) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x8) [ 1396.574539][ T8376] mkiss: ax0: crc mode is auto. 23:40:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x3, 0x0}) [ 1396.676944][ T8380] ref_ctr_offset mismatch. inode: 0x40f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x31, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfeffffff00000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1397.204767][ T8394] sp0: Synchronizing with TNC 23:40:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x8) 23:40:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x4, 0x0}) 23:40:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1397.823626][ T8420] mkiss: ax0: crc mode is auto. 23:40:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:20 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1397.890881][ T8423] binder: BINDER_SET_CONTEXT_MGR already set [ 1398.058556][ T8423] binder: 8422:8423 ioctl 40046207 0 returned -16 [ 1398.091562][ T8401] sp0: Synchronizing with TNC [ 1398.182308][ T8420] mkiss: ax0: crc mode is auto. 23:40:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x33, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x5, 0x0}) 23:40:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0xd59) 23:40:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffa0010000, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1a0) 23:40:21 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x6, 0x0}) 23:40:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x35, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1399.571112][ T8486] sp0: Synchronizing with TNC [ 1399.741876][ T8493] sp0: Found TNC [ 1399.855282][ T8501] ref_ctr_offset mismatch. inode: 0x446a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x300) 23:40:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x7, 0x0}) 23:40:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1400.361430][ T8493] sp0: Synchronizing with TNC [ 1400.524001][ T8494] sp0: Found TNC [ 1400.916734][ T8522] mkiss: ax0: crc mode is auto. 23:40:23 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:23 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="6e262ec6e6773c90483f4d872535e751ca8abad775f7c9529421474e980cb118f3a101665861db205da4bde4d0bdfb04d79dba7971e2a4b7da44658ca75eeb97c4df93c62b1ad2980290577dce3f7da333d7f1f1cdc873821929b3658199aad79655b345e7dd5dc447be5bbacbfd2ae1de3c5c3ff817cbd880fe33e2ec569b2048e16e42ef089c4e705ad07407abb42191ca70bc10110156772fcf2b954aeeccdb6b806dc5960250a1e5f35a924a9d1fd353417bfecc549d85d0536daf4126ffb42a628da5", 0xc5}, {&(0x7f00000002c0)="fa6191df23304627481840459aeb6395822c3e568e9057ab19c8f6a78319f2454accf38a6ed1edcefd2907ce7bc8b3a27b67abdae47f78e4edbb63431072b5613d53d3437e60d424ac86aeaceebf101897f19f7287e0cf0de4b8479bd14148a77628ca9579249fc4525e61096f", 0x6d}], 0x2, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1000000000000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x90}}, {{&(0x7f0000000400)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="f162e413ae89e2ee400b3fe331c477a97b1da77294945215d001a0df90c197ffc9f5122ae9808dfa", 0x28}, {&(0x7f00000004c0)="c0fe94bcdf14d3e6054b0d33d3916ca0bba3546c37b51d61bc", 0x19}], 0x2, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0xa6a5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}], 0x48}}, {{&(0x7f00000005c0)=@generic={0x11, "a0d4fe33719857590da7ea8302fa399c803f08713216ddad3f2b16d02660ae598cb3758dac710c1672bb717dfaa992a5f3d08283dcb42748717371f897c7a04d2809975e0f9ecbf000eafbc011d2642810e4216388252c421344b32d4dd52ccd3fb514227b091491505cff5c5c4c0312eb17b10cac646e90a30ddcce3ece"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)="d5f80b8ab650e52f40", 0x9}, {&(0x7f0000000680)="4c549f154ef70c23a5721d7647722144712793c3ea540741ca419534e5d633a10fb2607fa9ba7d2188e89fbb0e07c5055d2b5931a8972dbab128c4285647c351a78cb365ebb532e23481ade693795580af23a48886d7547d19689c2a926fe85ee7db4a37ec1047ec5ba84d932bf2b7f6849a", 0x72}, {&(0x7f0000000700)="5b687f0d5b2898f30db4f17a15329f6ff081a958b084d7baae974427695cab89def8ade0fde1110a2bb9ab4b786007b608aa3e61b4", 0x35}, {&(0x7f0000000740)="ebaaebb8a5a7fae511822dcdb56cd402d7bbf7e7747022d8a4aa8a2e8683163a16a062bcd32aad180a0b3e1f875e11a6b7bba71a9c3cde1cf1f6d2c734ccc3aa3740cb7bf6d8d2154fbdd623f2e061b011bd2e53106178b781e6ca9acee7d7ceb3ddfb425a39585de9c94e6b4de84640ddec45e43679f124f3c347783576310857440182c82e88565d22ad00490aa78015eeb48840d28a56bb10ec57a21b921d93abc7263220d3fc1791526b8881d16fcb39631fd10b923767c675b5a9908e8d778397e7", 0xc4}], 0x4}}, {{&(0x7f0000000880)=@ethernet={0x1, @random="b0d2644b8ad6"}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)="f941a55af18e05379d71080ff60388b17f3d158f98aba1b4e3525a3ced18299a9b024c35972e6be8b316460831568b987a0bf6ac075663d4246f", 0x3a}, {&(0x7f0000000940)="745c828fe40bd80581499eaf97bb73a39370fb0397d6710619344f3de3fcdc9be02fe8b97e4a9e2e3807661533ce11c98b8efe0d4583a549be54c9e6bf4b795baec97705489663d8f977b20a565da7c087564dd7ca85c9a8e8a018060c277b9ce082150b61b00016931609b985994b9c6c2e085597d535d38d545b56ed997a3a35baccb3500e26d9e54e94da69794aa8836145c73c3cd15ce93906f81bc5486ecb083b36c489fec9439010aa8ab294f6e73ea990b74bdd7664c0189249484a7345", 0xc1}, {&(0x7f0000000a40)="614f8d5fd075d7c277e4075834a190ec2205cdb1385256de2a246dfbab366ae500ebfb231201216306f7e3c3c56ca7b3039f77c70716c9cf8e607df4419d77f322588ad7f90d5a58be3cbca21cdddb8fea0ca3cb12363b19c5c95ae294141a54b31cae2cb5b07977a640a7657ad8dcc8b75f5ba859f1b2b28d93d5c8", 0x7c}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="bcb57c84e11bde240f92387973", 0xd}, {&(0x7f0000001b00)="27716ec981f51f6b3fa7055a771119c35b7fcd9824783e98c2dbcd1e6cbec0", 0x1f}], 0x6, &(0x7f0000001bc0)=[@timestamping={{0x14}}], 0x18}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c80)="40b241a18e9486dcdd1d18ab7640e61f3d3aefaf52601f02108fffa02d82616f635cdc25949308eaa33aebb96ff1fb3e95a4c8990b301e8f4196e9481cc3036d264122f918362872722b7e216d586929b4a12b79d8c8a1f64a3f7e75a987543086a821fc53854440e00e199b596da23e477ffefe266a5b81024004234bbbbe128a1a97913c69e78e3329e8604a6679486567ee002e30f3700fc808", 0x9b}], 0x1, &(0x7f0000001d80)=[@mark={{0x14, 0x1, 0x24, 0xa97a}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x90}}, {{&(0x7f0000001e40)=@in={0x2, 0x4e22, @multicast2}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001ec0)="f6724b66a41e9c323c54f9d7bcdda1930a060609f51bae18ff46b26486c85a66dfe38167400526ba", 0x28}, {&(0x7f0000001f00)="2490ec3e5bbcc41af47470e994e2ac6a9b62498eb595567fe3e289f4dcbdb1195b9c29b61053a3528c94d3d911d103591cc4a36907a044bb1651ac39f498427e5f2e84f50737d1db521dbb30faa6bcea14acf648bdcf960aac0739ebb84e6a58c434dd9ec39600dc50e99c93776f39a0a81d58deb3ccb29675dbdd105f655e", 0x7f}, {&(0x7f0000001f80)="2fdc1e4df7eae38384344772c8c7aafa73b692944c5b874e8e2fd993e4b875e5fdeafdd27a43a53001", 0x29}, {&(0x7f0000001fc0)="08b0234dfb361848a420c3d3e4fa46a0c5a0405d20721bb08ea4335d8531a9e61338b147548ac9a41feaec87e19d71b0d09b00c2361fd3107ac240ace5389be8d05be5ffefc1b856dd3c1e3102730167c550ca27f739", 0x56}], 0x4, &(0x7f0000002080)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3f}}], 0x30}}], 0x6, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x1a0, 0x0}) 23:40:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x480) 23:40:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x30, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x300, 0x0}) 23:40:24 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x38, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x500) 23:40:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x500, 0x0}) 23:40:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x1) 23:40:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:25 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x600) [ 1403.694851][ T8619] ref_ctr_offset mismatch. inode: 0x4518 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x600, 0x0}) 23:40:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x1) 23:40:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3a, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1404.457444][ T8639] binder: BINDER_SET_CONTEXT_MGR already set 23:40:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3b, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1404.607177][ T8639] binder: 8635:8639 ioctl 40046207 0 returned -16 23:40:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x700) 23:40:27 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x1) 23:40:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x700, 0x0}) [ 1405.312304][ T8658] mkiss: ax0: crc mode is auto. 23:40:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3c, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) pipe(&(0x7f0000000140)) 23:40:28 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x4000, 0x0}) 23:40:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3e, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1406.146247][ T8689] ref_ctr_offset mismatch. inode: 0x450a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4000) 23:40:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) [ 1406.416784][ T8699] binder: BINDER_SET_CONTEXT_MGR already set [ 1406.422830][ T8699] binder: 8693:8699 ioctl 40046207 0 returned -16 23:40:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x42, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x110, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x1000000, 0x0}) [ 1406.806008][ T8708] mkiss: ax0: crc mode is auto. 23:40:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) dup(r0) 23:40:29 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x8004) 23:40:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x2000000, 0x0}) 23:40:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) 23:40:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x43, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1a0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1407.621817][ T8743] ref_ctr_offset mismatch. inode: 0x451d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1407.826715][ T8751] mkiss: ax0: crc mode is auto. 23:40:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) [ 1408.070398][ T8751] mkiss: ax0: crc mode is auto. 23:40:30 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x3000000, 0x0}) 23:40:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x46, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xff00) 23:40:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1408.745017][ T8802] ref_ctr_offset mismatch. inode: 0x4522 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x480, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x4000000, 0x0}) 23:40:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1409.014315][ T8804] mkiss: ax0: crc mode is auto. 23:40:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1000000) 23:40:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:32 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x5000000, 0x0}) [ 1409.919678][ T8849] mkiss: ax0: crc mode is auto. 23:40:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x600, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x6000000, 0x0}) 23:40:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2000000) 23:40:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x700, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1410.750738][ T8888] binder: BINDER_SET_CONTEXT_MGR already set 23:40:33 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3000000) [ 1410.884792][ T8888] binder: 8881:8888 ioctl 40046207 0 returned -16 23:40:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4c, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x7000000, 0x0}) 23:40:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1411.211345][ T8905] ref_ctr_offset mismatch. inode: 0x4482 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1411.332266][ T8914] mkiss: ax0: crc mode is auto. 23:40:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1001, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4d, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x40000000, 0x0}) 23:40:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4000000) 23:40:34 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1412.213164][ T8951] mkiss: ax0: crc mode is auto. 23:40:34 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0xa0010000, 0x0}) 23:40:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4e, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x8004, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:35 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20000020, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:40:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0xfdfdffff, 0x0}) [ 1412.741151][ T8974] ref_ctr_offset mismatch. inode: 0x40f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5000000) 23:40:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:35 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x8], [], @remote}, 0x800, 0x1}, 0x20) [ 1413.124363][ T8974] ref_ctr_offset mismatch. inode: 0x40f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0xfffffdfd, 0x0}) [ 1413.213586][ T8999] mkiss: ax0: crc mode is auto. 23:40:36 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6000000) 23:40:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x1a0ffffffff, 0x0}) 23:40:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1413.968734][ T9033] mkiss: ax0: crc mode is auto. [ 1413.982056][ T9029] ref_ctr_offset mismatch. inode: 0x4121 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) 23:40:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x100000000000000, 0x0}) 23:40:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:37 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x7000000) 23:40:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) 23:40:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x200000000000000, 0x0}) [ 1415.088758][ T9088] mkiss: ax0: crc mode is auto. 23:40:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) [ 1415.174668][ T9094] ref_ctr_offset mismatch. inode: 0x4281 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x300000000000000, 0x0}) 23:40:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x8000000) 23:40:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1415.572065][ T9121] binder: BINDER_SET_CONTEXT_MGR already set 23:40:38 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1415.642386][ T9121] binder: 9114:9121 ioctl 40046207 0 returned -16 23:40:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x400000000000000, 0x0}) 23:40:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) 23:40:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x40000000) [ 1416.054636][ T9141] ref_ctr_offset mismatch. inode: 0x42b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x10010000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x500000000000000, 0x0}) 23:40:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:39 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x40000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x80040000) 23:40:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x600000000000000, 0x0}) 23:40:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) [ 1416.686530][ T9174] ref_ctr_offset mismatch. inode: 0x4221 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1416.898405][ T9180] mkiss: ax0: crc mode is auto. 23:40:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) 23:40:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x700000000000000, 0x0}) 23:40:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x80040000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1417.180114][ T9180] mkiss: ax0: crc mode is auto. 23:40:39 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xa0010000) 23:40:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x4000000000000000, 0x0}) 23:40:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xa0010000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1417.597839][ T9235] ref_ctr_offset mismatch. inode: 0x42d1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1417.725753][ T9239] mkiss: ax0: crc mode is auto. 23:40:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xc0ffffff) 23:40:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xfcfdffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:40 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0xfdfdffff00000000, 0x0}) 23:40:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) [ 1418.239671][ T9272] mkiss: ax0: crc mode is auto. 23:40:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xdbffffff) 23:40:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xfeffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0xffffffffa0010000, 0x0}) [ 1418.994537][ T9303] mkiss: ax0: crc mode is auto. 23:40:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) 23:40:41 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:40:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffdfc, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:40:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xdcffffff) 23:40:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) [ 1419.614834][ T9339] ref_ctr_offset mismatch. inode: 0x4302 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1419.709662][ T9344] mkiss: ax0: crc mode is auto. 23:40:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffffe, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1419.795989][ T9333] ref_ctr_offset mismatch. inode: 0x4302 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000600)='/dev/input/mice\x00', 0x0, 0x40000) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000100)={{0x0, 0x4, 0x9, 0xa50a, 'syz1\x00', 0x101}, 0x1, [0x7ff, 0x7, 0x33c, 0x800, 0x0, 0x0, 0x8, 0x2, 0x9fe1, 0x9000, 0x6, 0x100000000, 0x0, 0x200, 0x2, 0x6, 0x1, 0x7fffffff, 0x20, 0xffffffffffffffff, 0x100000001, 0x4, 0x9, 0xfff, 0x1, 0x101, 0x3a, 0x76c, 0x4, 0x0, 0xe7c2, 0x6e, 0x7ff, 0x3, 0xffffffff, 0x3, 0x0, 0x3, 0x800, 0x7, 0x100, 0x0, 0x5, 0x4, 0xffff, 0x8, 0x9, 0xfffffffffffffff7, 0x5, 0x2, 0x36, 0xffffffff, 0x8, 0x0, 0x1, 0x2, 0x0, 0x7f, 0x3f, 0x6ead, 0x9, 0x1, 0x100, 0x2, 0x80, 0x7, 0x0, 0x20, 0x9, 0x8, 0x1, 0x1, 0x4, 0x1, 0x7fff, 0x2, 0xef4b, 0x1, 0xffffffff80000000, 0x2, 0x7fffffff, 0x4, 0xeea, 0x4, 0x2, 0xf880, 0x41b, 0xc00000000000000, 0x100000000, 0x100000001, 0x7fffffff, 0x0, 0x80000000, 0x8000, 0x2, 0x1, 0x100000001, 0x3, 0xf5, 0x800, 0x0, 0x8001, 0x7ff, 0xfffffffffffff801, 0xffffffffffffffff, 0x2, 0x80000000, 0x9, 0x3, 0x0, 0x828a0000, 0x0, 0x3, 0x7, 0xb3, 0x0, 0xdada, 0x80, 0x4, 0x0, 0x5, 0x7, 0x100, 0x100000001, 0x20, 0xfffffffffffffbff, 0x6a, 0x5], {r3, r4+30000000}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0463cebbc7e8655958b0419f3485846bb33e044000000000ca55a3dfd73fbe33bee96f0dbb0c3f14d4d24ed91da47029615a27bacba7e92a295f03"], 0x0, 0x0, 0x0}) 23:40:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xddffffff) 23:40:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:42 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1a0ffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1420.315263][ T9380] binder: 9374:9380 unknown command -1144102140 [ 1420.321566][ T9380] binder: 9374:9380 ioctl c0306201 20000080 returned -22 23:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xfdfdffff) 23:40:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) [ 1420.715251][ T9394] ref_ctr_offset mismatch. inode: 0x4422 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1420.727134][ T9400] binder: 9374:9400 unknown command -1144102140 23:40:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1420.807610][ T9400] binder: 9374:9400 ioctl c0306201 20000080 returned -22 23:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xff000000) 23:40:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20100, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000000c0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0x16, 0x3}, 0x14) 23:40:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) 23:40:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, 0x0) 23:40:43 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1421.308281][ T9414] mkiss: ax0: crc mode is auto. 23:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:40:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xfffffdfd) [ 1421.644725][ T9442] ref_ctr_offset mismatch. inode: 0x4311 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) fcntl$setsig(r0, 0xa, 0x0) 23:40:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x23d, &(0x7f0000000000)={@local, @random="265269eb77ea", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) r1 = dup(r0) fcntl$setown(r1, 0x6, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00cc1) [ 1421.997109][ T9455] mkiss: ax0: crc mode is auto. [ 1422.002327][ T9451] binder: 9450:9451 unknown command 4 23:40:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) [ 1422.076694][ T9451] binder: 9450:9451 ioctl c0306201 20000080 returned -22 [ 1422.202910][ T9458] binder: 9450:9458 unknown command 4 23:40:44 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe603}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1422.286963][ T9458] binder: 9450:9458 ioctl c0306201 20000080 returned -22 23:40:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) 23:40:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:45 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f00000004c0)=""/217, 0xd9}, {&(0x7f00000005c0)=""/220, 0xdc}, {&(0x7f00000006c0)=""/144, 0x90}, {&(0x7f0000000780)=""/46, 0x2e}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000880)}], 0xa, &(0x7f0000000980)=""/142, 0x8e}, 0x40000040) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a80)='/selinux/mls\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000ac0)=r1, 0x4) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x40) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/50, 0x32}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0xfffffff, 0xffffffffffff8000, 0x6, [], &(0x7f0000000180)={0x98092a, 0xfffffffffffffffa, [], @value=0x1}}) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000880), 0x4) [ 1422.711788][ T9490] ref_ctr_offset mismatch. inode: 0x43d1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1422.745216][ T9489] mkiss: ax0: crc mode is auto. 23:40:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x100) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x5, {0x7, 0x1f, 0x77e, 0x10400, 0x0, 0x4, 0x2, 0x4}}, 0x50) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff91, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000200)={{0x100000000, 0x6, 0x4, 0x1, 0x72d, 0x7fffffff}, 0x8, 0x4, 0xffff, 0x7, 0x1, "2970cfe5f73be5a0ebd9f3dcc1ec6d7f9e09c26c268697bc57849c56ef80a3da91693c6cf25eac5b841a169e3c4a1d0c7a0b3510f017b22c1dd70b9847213a97c466e440c7dc134ac44df09ac1767cce4a570f4cb7b7f21315ed2083a9cac8fd32cf4a8644cf40fa774c2d12b9719a3b50835b73c9d02aa99d50cbf6819f23a4"}) 23:40:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x500000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:45 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) 23:40:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdb) 23:40:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x600000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1423.368886][ T9528] mkiss: ax0: crc mode is auto. 23:40:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) getpid() r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x400001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000580), &(0x7f0000000300)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x9c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="11634840030000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="8561646600000000080000000000000001000000000000002e00000000000000852a68730a11000003000000000000000000000000000000852a747001000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000001000000000000001000000000000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001400000000000011634840030000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000008561646600000000040000000000000000000000000000003700000000000000852a747001000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/125], @ANYBLOB='}\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0004400222e50000a37a81033d70151fb9700322172582483d8094a6a6301d71a3460d5be8febd8509d3a9b8a305744740c6c1581b4339076d893b5ab1f76ad73cb3155409dd1d9566f33ec0bb3c10faa5523575ce684293a2df99e5843dbab93df7dd8cd21a0564b0"], 0x9d, 0x0, &(0x7f0000000380)="56a0fb76af365908e1f4c81624e383e7f049c20250a615a7bfdccc9f47eed833858781b7ca5fb40d9522dea156175e9d5ac728681571c456bb91e374d42a018b0509ed60aa2f2299be5110ad27fb102bcc323cc3323dc0f48d1ab0e11c48a777f6fed2e27fb3a33f50e1ad67975fd9ba52eaf8497276a467da05d7bab4a2e5a28515a9aa5a1a3fb281866c5a7e87bc064040f8dd4212e2ada335a2a2d0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1423.485355][ T9536] ref_ctr_offset mismatch. inode: 0x449a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1423.692205][ T9528] mkiss: ax0: crc mode is auto. 23:40:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000801, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) 23:40:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) 23:40:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdc) 23:40:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7240440044000000000b275fef605bac090aa921992963d206d05cc4c6e0a623ce0d304b86e7cd05a4210d8191cb578f30ccf01fbd22a10698660d75abb406493c92cef057ff2eb7989ca421c7ee1922ab5288b0b6cee63d77bc7d14815badbc02cbdc6782e5fc610169bc47a691607034365708a807653d574eb0e8999889ce48ccc262b99a18f35b17711a145d3cbdeac115efb6031c1301a999c85d782926880b2350177711f6a29"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x1, 0xff, 0x400, 0x8000}, 0x6) sendto$ax25(r1, &(0x7f0000000000)="dd6b39c794437a53cec7d5a08c9205708d0ccd00e55408d2d11d7a51e66da53a90f4ea6b2e50afaa5eb914d910f807917e7c76e6db138945970691f4d055", 0x3e, 0x24040000, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000240)={0x1f, 0x8, 0x7, 0x1eb5}) 23:40:46 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:46 executing program 3: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000340)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000280)={{}, 'port1\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 23:40:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1001000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1424.407871][ T9585] mkiss: ax0: crc mode is auto. [ 1424.413839][ T9590] binder: 9583:9590 unknown command 1074013367 [ 1424.423818][ T9587] ref_ctr_offset mismatch. inode: 0x44a4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) [ 1424.502164][ T9590] binder: 9583:9590 ioctl c0306201 20000080 returned -22 [ 1424.702917][ T9585] mkiss: ax0: crc mode is auto. [ 1424.768243][ T9590] binder: BINDER_SET_CONTEXT_MGR already set [ 1424.774389][ T9594] binder: 9583:9594 unknown command 1074013367 [ 1424.774405][ T9594] binder: 9583:9594 ioctl c0306201 20000080 returned -22 23:40:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) 23:40:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1425.054253][ T9590] binder: 9583:9590 ioctl 40046207 0 returned -16 23:40:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:47 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 23:40:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) 23:40:48 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 23:40:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x8004000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1425.516726][ T9639] mkiss: ax0: crc mode is auto. [ 1425.705796][ T9643] ref_ctr_offset mismatch. inode: 0x420d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1425.821379][ T9639] mkiss: ax0: crc mode is auto. 23:40:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x4309, @empty, 0x7f}, @in6={0xa, 0x4e20, 0x9, @local, 0xfff}, @in6={0xa, 0x4e20, 0xd97, @loopback, 0x8}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x7, @empty, 0xffffffffffffffff}], 0x80) 23:40:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) 23:40:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1a0ffffffff) 23:40:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xfcfdffff00000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:49 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x400, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x101, 0x800, 0x9, 0x9721, 0x0, 0x6, 0x8012, 0x1, 0x6, 0x101, 0x4, 0x4, 0x0, 0x1, 0x5, 0x81, 0xce23, 0xffff, 0x2, 0x200, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x7, 0x4a, 0x6, 0x0, 0x1, 0x2, 0x5, 0x0, 0xb14, 0x10000, 0xc46c, 0x0, 0x81, 0x3, @perf_bp={&(0x7f0000000040), 0x1}, 0x10, 0x7, 0x1, 0x3, 0x7, 0x7, 0x2}, r1, 0xb, r2, 0x79a097eb50e5acb9) [ 1426.572357][ T9690] mkiss: ax0: crc mode is auto. 23:40:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xfeffffff00000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x100000000000000) 23:40:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1427.006165][ T9701] ref_ctr_offset mismatch. inode: 0x4440 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x8000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:40:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) 23:40:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1427.474107][ T9728] mkiss: ax0: crc mode is auto. [ 1427.533960][ T9727] mkiss: ax1: crc mode is auto. [ 1427.642158][ T26] audit: type=1400 audit(1567381250.201:127): avc: denied { map } for pid=9731 comm="syz-executor.4" path="/selinux/status" dev="selinuxfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 [ 1427.643701][ T9739] binder: BINDER_SET_CONTEXT_MGR already set 23:40:50 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x200000000000000) 23:40:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1428.105661][ T9739] binder: 9731:9739 ioctl 40046207 0 returned -16 [ 1428.186249][ T9765] ref_ctr_offset mismatch. inode: 0x44b3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffffa0010000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:40:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463a4c45dad00000463044000000000"], 0xfffffffffffffff6, 0x0, 0x0}) 23:40:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) [ 1428.604617][ T9776] mkiss: ax0: crc mode is auto. 23:40:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1428.690576][ T9789] binder: 9787:9789 unknown command -995859708 23:40:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1428.831631][ T9789] binder: 9787:9789 ioctl c0306201 20000080 returned -22 [ 1428.926778][ T9789] binder: BINDER_SET_CONTEXT_MGR already set [ 1428.974542][ T9789] binder: 9787:9789 ioctl 40046207 0 returned -16 23:40:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) 23:40:51 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:40:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='%ocharset=maciceland,iocharset=c']) 23:40:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x300000000000000) [ 1429.447390][ T9814] ref_ctr_offset mismatch. inode: 0x4498 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) 23:40:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\\ocharset=maciceland,iocharset=c']) 23:40:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x400000000000000) 23:40:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) [ 1430.284486][ T9844] binder: BINDER_SET_CONTEXT_MGR already set [ 1430.284882][ T9839] binder: 9838:9839 ioctl 81009431 200000c0 returned -22 23:40:52 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:53 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1430.534251][ T9844] binder: 9838:9844 ioctl 40046207 0 returned -16 23:40:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='i\\charset=maciceland,iocharset=c']) 23:40:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) [ 1430.705252][ T9854] mkiss: ax0: crc mode is auto. [ 1430.714844][ T9860] ref_ctr_offset mismatch. inode: 0x44c2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:40:53 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x500000000000000) 23:40:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='ioch\\rset=maciceland,iocharset=c']) [ 1431.260936][ T9887] binder: BINDER_SET_CONTEXT_MGR already set 23:40:53 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:54 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1431.404112][ T9887] binder: 9867:9887 ioctl 40046207 0 returned -16 23:40:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffff, 0xb9b5e1ac50acea31) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000dd03630741000000000000000000"], 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/54, 0x36}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/130, 0x82}], 0x9, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_open_dev$cec(&(0x7f00000006c0)='/dev/cec#\x00', 0x1, 0x2) 23:40:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x600000000000000) 23:40:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) 23:40:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochar#et=maciceland,iocharset=c']) [ 1431.868546][ T9909] binder: 9906:9909 unknown command 64815104 23:40:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1432.022623][ T9911] mkiss: ax0: crc mode is auto. [ 1432.031412][ T9909] binder: 9906:9909 ioctl c0306201 20000080 returned -22 23:40:54 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1432.191006][ T9918] binder: 9906:9918 unknown command 64815104 23:40:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) 23:40:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochar%et=maciceland,iocharset=c']) [ 1432.385670][ T9918] binder: 9906:9918 ioctl c0306201 20000080 returned -22 23:40:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x700000000000000) 23:40:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1432.526937][ T9940] ref_ctr_offset mismatch. inode: 0x44be offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:40:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$poke(0x5, r2, &(0x7f0000000100), 0x5) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 23:40:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) [ 1432.834475][ T9951] mkiss: ax0: crc mode is auto. 23:40:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochar*et=maciceland,iocharset=c']) 23:40:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800000000000000) 23:40:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:55 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xf0, 0x0, &(0x7f0000000040)=ANY=[], 0x316, 0x0, 0x0}) 23:40:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochar+et=maciceland,iocharset=c']) 23:40:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1433.561522][ T9988] mkiss: ax0: crc mode is auto. [ 1433.659321][T10001] binder: 9994:10001 unknown command 0 [ 1433.674623][T10000] ref_ctr_offset mismatch. inode: 0x44ca offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1433.732938][T10001] binder: 9994:10001 ioctl c0306201 20000080 returned -22 [ 1433.789859][ T9988] mkiss: ax0: crc mode is auto. 23:40:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) [ 1433.856500][T10001] binder: BINDER_SET_CONTEXT_MGR already set [ 1433.874281][T10013] binder: 9994:10013 unknown command 0 [ 1433.879800][T10013] binder: 9994:10013 ioctl c0306201 20000080 returned -22 23:40:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochar-et=maciceland,iocharset=c']) 23:40:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4000000000000000) [ 1434.270557][T10001] binder: 9994:10001 ioctl 40046207 0 returned -16 23:40:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:56 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2630feff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:57 executing program 4: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7fff, 0x100) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x800000000a, &(0x7f00007e0000)=""/4, &(0x7f0000000000)=0x4) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000100)={0x7, 0x6, [{0x81, 0x0, 0xc39}, {0x5, 0x0, 0xafe8}, {0xffffffff80000000, 0x0, 0x4f9}, {0x3, 0x0, 0x7f}, {0x6111, 0x0, 0x7f}, {0x7ff, 0x0, 0x7}, {0x80000000, 0x0, 0xfe}]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="c3eee66ce56507914866b5afdce200aa6a00337b938d6456e7f7c94153eac6c662fbedf1d711faaa3fe415c823b5346cc47af8ed6508199d1aaceffb3b42d89ded7099962599190f06794ec7bdae14470cb17cc2cc6b0bfb1877241f77f8e49b9891ae19e861fa9c721581bd156f3270462bee9296ed8478db238842258c87"], 0x0, 0x0, 0x0}) 23:40:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochar.et=maciceland,iocharset=c']) [ 1434.656229][T10043] mkiss: ax0: crc mode is auto. [ 1434.685870][T10046] ref_ctr_offset mismatch. inode: 0x452a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1434.900065][T10043] mkiss: ax0: crc mode is auto. 23:40:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) 23:40:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1435.055849][T10066] binder: 10059:10066 unknown command 1827073731 [ 1435.062229][T10066] binder: 10059:10066 ioctl c0306201 20000080 returned -22 23:40:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x8004000000000000) 23:40:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochar0et=maciceland,iocharset=c']) 23:40:57 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) 23:40:58 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000180)) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) futex(&(0x7f0000000040), 0x9, 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)=0x1, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:40:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1435.675260][T10092] mkiss: ax0: crc mode is auto. 23:40:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharXet=maciceland,iocharset=c']) 23:40:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) [ 1435.908418][T10092] mkiss: ax0: crc mode is auto. 23:40:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56e6e309affe620440009ab203000000"], 0x0, 0x0, 0x0}) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r1, 0x5, 0xffff, r2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', r4}) 23:40:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:58 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:40:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) 23:40:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xc0ffffff00000000) 23:40:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochar\\et=maciceland,iocharset=c']) [ 1436.590350][T10145] binder: 10141:10145 unknown command 165930582 23:40:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1436.677758][T10146] ref_ctr_offset mismatch. inode: 0x452d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1436.775373][T10145] binder: 10141:10145 ioctl c0306201 20000080 returned -22 [ 1436.893947][T10152] binder: 10141:10152 unknown command 165930582 23:40:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) [ 1436.976115][T10139] ref_ctr_offset mismatch. inode: 0x452d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1437.021069][T10152] binder: 10141:10152 ioctl c0306201 20000080 returned -22 23:40:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xdbffffff00000000) 23:40:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharcet=maciceland,iocharset=c']) 23:40:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:40:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="046304400000000004630440000000006259ebd946e8c259a43a828476e7ed2f6d019ad5b2a141d3ffb0097152b0fde3a57a01df831dd33a56ff411efb5eb442ba58e4bc28e2a6d5955e04f6230bd05a8cddb7d608c2411e63ebe30d25174052b0d745b788d0c01c538164f8e5b81993099227bfc3fdb97e91172082d7c6a05484067daa9aa26b0b1947a3ad90b6041745dc0e5f15b05dcd6f6706eaab85b2122055a1173fc2e2ee66d529d1d94575a405e42a92aa8cbb5f3ca8bf12e4f81164487ef22584f1ebb4ebafb51b9753469aecb386fbcc3dece0ff8b21a5533b66b31f7e9766d9127549fc48b974de05795800"/250], 0x0, 0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) [ 1437.467302][T10175] mkiss: ax0: crc mode is auto. 23:41:00 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:41:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochardet=maciceland,iocharset=c']) [ 1437.780128][T10175] mkiss: ax0: crc mode is auto. 23:41:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:41:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) 23:41:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/162, 0xa2, 0x0, 0x15}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x5, 0x1, 0x34}, @fda={0x66646185, 0x4, 0x2, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/218, 0xda, 0x1}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}, @free_buffer={0x40086303, r1}, @acquire_done, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f0000001040)="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"}) 23:41:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xdcffffff00000000) 23:41:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:41:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochariet=maciceland,iocharset=c']) [ 1438.493915][T10225] debugfs: File '10218' in directory 'proc' already present! 23:41:01 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) 23:41:01 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="042f924000f2ffff0363044000000000"], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x75f3, @mcast2, 0xd433}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, @in={0x2, 0x4e23, @multicast2}], 0x5c) [ 1438.827813][T10227] mkiss: ax0: crc mode is auto. 23:41:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xddffffff00000000) [ 1439.030348][T10248] ref_ctr_offset mismatch. inode: 0x4535 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:41:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharlet=maciceland,iocharset=c']) [ 1439.217432][T10260] binder: 10253:10260 unknown command 1083322116 [ 1439.296297][T10260] binder: 10253:10260 ioctl c0306201 20000080 returned -22 23:41:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) [ 1439.486259][T10266] mkiss: ax0: crc mode is auto. 23:41:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xf8, 0xca240) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x1, 0x8000, 0x3, 0x3}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = dup3(r0, r0, 0x80000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440080000000463044000000000"], 0x0, 0x0, 0x0}) [ 1439.744623][T10276] mkiss: ax0: crc mode is auto. 23:41:02 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xfdfdffff00000000) 23:41:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharoet=maciceland,iocharset=c']) 23:41:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) 23:41:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffdd) [ 1440.445472][T10310] mkiss: ax0: crc mode is auto. 23:41:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={r2, 0x38, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e23, 0x10001, @loopback, 0xfffffffffffeffff}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={r3, 0x54, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x1, @mcast2, 0x10000}, @in6={0xa, 0x4e20, 0x8, @remote, 0x7}, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x3}]}, &(0x7f00000003c0)=0x10) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xd79, 0x8ab222e207ab9699) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80067ea, 0x400) ioctl$TCSBRK(r4, 0x5409, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 23:41:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharpet=maciceland,iocharset=c']) [ 1440.644604][T10325] mkiss: ax1: crc mode is auto. 23:41:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @remote}, 0x800, 0x1}, 0x20) 23:41:03 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x7fff, 0x9, 0x5, 0x0, 0x0, [{r0, 0x0, 0xfffffffffffffef0}, {r0, 0x0, 0xc2}, {r0, 0x0, 0xa9}, {r0, 0x0, 0x7}, {r0, 0x0, 0x9c}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x10, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x4f91, 0x128, 0xffffffff, 0x6, 0x5}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2, 0x6}, 0x8) 23:41:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xff00000000000000) 23:41:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1441.285199][T10357] ref_ctr_offset mismatch. inode: 0x4532 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharuet=maciceland,iocharset=c']) 23:41:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:41:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101100, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x0, 0x10001, 0x8, 0x9, 0x7fffffff, 0x6}, 0x805}, 0xa) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) 23:41:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffffa0010000) 23:41:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, 0x0) 23:41:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharxet=maciceland,iocharset=c']) 23:41:04 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], [], @remote}, 0x800, 0x1}, 0x20) 23:41:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1442.446301][T10393] mkiss: ax0: crc mode is auto. 23:41:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochars%t=maciceland,iocharset=c']) 23:41:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="f85215f620dfa71820189f1bbc6ea8abe18c4cc5ea0afa73a1529576685db91113c2d726ef57377b1f54e2d7e561ced80824568f02a0bdf322958c73beab1aeb409966d858fd9169a7e9797f12bdcaa55cffffd27a76ae95d1ff9d21453b03456ce95aa4ce8eaa0b27c586d29f5f0e7735eff45a1b806b197cd173d9b396003b5e4ab8b1242124cd2cec18e32ea605f6b64c7ed6c82960cdbb382cb8bc97ed", 0x9f, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r1, 0x46, 0x8b}, 0x0, &(0x7f0000000200)="7e9500d746c420dcff45646f1015f3f4611844d6f6f0a56c77bc034dbfdd0f309e6d4760fddb3c51d294d3e589bb0fc444206839cd80af4de61592a7e5c6b7393888006109a0", &(0x7f0000000280)=""/139) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04046304d500"/16], 0x0, 0x0, 0x0}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) [ 1442.576220][T10395] ref_ctr_offset mismatch. inode: 0x4554 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], [], @remote}, 0x800, 0x1}, 0x20) [ 1442.787048][T10417] mkiss: ax0: crc mode is auto. 23:41:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) set_robust_list(&(0x7f0000000140)={&(0x7f0000000180), 0x2, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1442.945978][T10432] binder: 10429:10432 unknown command 73597956 [ 1442.952215][T10432] binder: 10429:10432 ioctl c0306201 20000080 returned -22 23:41:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iochars\\t=maciceland,iocharset=c']) 23:41:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000], [], @remote}, 0x800, 0x1}, 0x20) [ 1443.284653][T10452] binder: BINDER_SET_CONTEXT_MGR already set 23:41:06 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1443.414404][T10452] binder: 10429:10452 ioctl 40046207 0 returned -16 23:41:06 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) 23:41:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharsyt=maciceland,iocharset=c']) 23:41:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], [], @remote}, 0x800, 0x1}, 0x20) 23:41:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440000400000463043fffff0000"], 0x0, 0x0, 0x0}) [ 1443.836962][T10467] ref_ctr_offset mismatch. inode: 0x41b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1443.889323][T10469] mkiss: ax0: crc mode is auto. [ 1444.056433][T10498] binder: 10493:10498 unknown command 1057252100 23:41:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharse\\=maciceland,iocharset=c']) [ 1444.167615][T10498] binder: 10493:10498 ioctl c0306201 20000080 returned -22 [ 1444.189611][T10472] mkiss: ax0: crc mode is auto. 23:41:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x2}, 0x20) [ 1444.366884][T10498] binder: BINDER_SET_CONTEXT_MGR already set [ 1444.424050][T10498] binder: 10493:10498 ioctl 40046207 0 returned -16 23:41:07 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1444.637887][T10536] mkiss: ax0: crc mode is auto. 23:41:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=\\aciceland,iocharset=c']) 23:41:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000140)={0x3, 0x4, @value=0x3}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xc240, 0x3, 0x7, 0xd, 0x0, 0x3, 0x7cbdf8ee, 0x7cce9069, 0x9, 0x40, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x300}, 0x20) 23:41:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdc) [ 1445.171756][T10561] ref_ctr_offset mismatch. inode: 0x40b5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=m\\ciceland,iocharset=c']) 23:41:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0x7ff}]}, 0xc, 0x2) [ 1445.467651][T10570] mkiss: ax0: crc mode is auto. [ 1445.495932][T10557] ref_ctr_offset mismatch. inode: 0x40b5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdc) 23:41:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x8}, 0x20) 23:41:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=mac%celand,iocharset=c']) 23:41:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x179) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={r2, r3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:08 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="026304400000fbff0466da3d0d2b87debce56c1026020000"], 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0x41, [], 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=""/65}, &(0x7f0000000300)=0x78) 23:41:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x80000}, 0x20) 23:41:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=mac\\celand,iocharset=c']) 23:41:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdc) [ 1446.478076][T10620] mkiss: ax0: crc mode is auto. [ 1446.545851][T10618] ref_ctr_offset mismatch. inode: 0x4191 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1446.630540][T10632] binder: BC_ACQUIRE_RESULT not supported [ 1446.783806][T10632] binder: 10627:10632 ioctl c0306201 20000080 returned -22 23:41:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0xa4ffffff}, 0x20) [ 1446.902218][T10635] mkiss: ax0: crc mode is auto. [ 1446.961421][T10638] binder: BC_ACQUIRE_RESULT not supported [ 1447.036460][T10620] mkiss: ax1: crc mode is auto. [ 1447.113508][T10638] binder: 10627:10638 ioctl c0306201 20000080 returned -22 23:41:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macic%land,iocharset=c']) 23:41:09 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0xffffffa4}, 0x20) 23:41:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff0d, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046904400000"], 0x346, 0x0, 0x0}) 23:41:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x400200) accept$packet(0xffffffffffffffff, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002f40)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000002f80)={@rand_addr="e65724dc9dc0316163a6201f41955364", r2}, 0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3) 23:41:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macic\\land,iocharset=c']) [ 1447.925709][T10692] binder: 10680:10692 ioctl c0306201 20000080 returned -14 [ 1447.950483][T10685] ref_ctr_offset mismatch. inode: 0x40b5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x8000000000000}, 0x20) [ 1448.095010][T10700] binder: 10680:10700 ioctl c0306201 20000080 returned -14 [ 1448.282372][T10696] mkiss: ax0: crc mode is auto. 23:41:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macicyland,iocharset=c']) 23:41:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0xa4ffffff00000000}, 0x20) 23:41:11 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macice%and,iocharset=c']) [ 1449.015149][T10729] binder: BINDER_SET_CONTEXT_MGR already set [ 1449.150587][T10729] binder: 10721:10729 ioctl 40046207 0 returned -16 23:41:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x8}, 0x20) 23:41:11 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x22) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000040)="d6930f3861751cc7152cf3bf9b31c326e870dac8c188e3c664de2a33d127465477e0a4043310") getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 23:41:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x200000) sendto$rose(r1, &(0x7f0000000100)="db3dec57c34c2e90b1ebd12d21d75b63aeeab3bf40d2f90e073f788f9751ab5b6d914c9fb7fa9b52c436a951d310d6a766ff", 0x32, 0x4, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffffffffffc2, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1449.455722][T10745] mkiss: ax0: crc mode is auto. 23:41:12 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macice/and,iocharset=c']) 23:41:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x80000}, 0x20) [ 1449.854507][T10767] ref_ctr_offset mismatch. inode: 0x4231 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) rt_sigsuspend(&(0x7f0000000080)={0x6}, 0x8) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSBRKP(r0, 0x5425, 0x0) 23:41:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macice\\and,iocharset=c']) 23:41:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0xa4ffffff}, 0x20) 23:41:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x200, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0c0000004700dcc1dbe4892b7338d558345bf1b95708342848038da090cf1197f1df98b1e09dcf3dc9468882acd201aa547f8e186ef31054bfd67edbd78b3aa649c6f26c020663d3008f5964c2"], 0x4d) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000054ebb5fe000000000000000000000000000000000000000000000000000000000000000000000000000000009556e56b000000eb00"/202]) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000001c0)={0x7, 'syz1\x00'}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a80)={0x44, r2, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x32b}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc000000000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffff001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0063404002000000000000000000000000000000000000001100"/52, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62730b1100000300"/36], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="04630440030000000063404002000000000000000000000000000000000000001100"/60, @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB="8561646600000000020000000000000001000000000000001800000000000000852a747001000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/204], @ANYBLOB="000000000000000002000000000000000800000000000000852a747001000000", @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB='\x00'/63], @ANYBLOB="000000000000000002000000000000003f00000000000000"], @ANYPTR=&(0x7f0000000940)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="1163484003000000000000000000000000000000000000001000"/52, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="852a687300100000020000000000000000000000000000008561646600000000000000000000000002000000000000001a00000000000000852a747001000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/173], @ANYBLOB="0000002b000000000800000000c0ddf532121b0f2ab9a9ea4d6918f500000036ffffffffe30000"], @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="00000000000000000463044001000000"], 0xfffffffffffffe5a, 0x0, 0x0}) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@in6={0xa, 0x4e23, 0xcb, @dev={0xfe, 0x80, [], 0x27}}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="6edfd9f7b7ff35ffcb6b22b822bdbfa81ad085ffa3248efee74088c7830b7449edf2440b740253d662a71bd2be7626bb5a1f34bb2c8ac463ec1072dfa1840295de7988267fd97c906d8312f448919dcda91b223365bf1dfdf8", 0x59}, {&(0x7f0000000300)="08d1de4953993e8d1508ec0678e300cbbc89265b35556520b6172508ef7ab49fded735abb6b17aefa42e491a01d64889ea2f06d53d39f4eadb30c5e06e0ed099900d31b951cda406bb5ecbf3dec01eb53f4049ac486cf528264105ab37cf8049d6b9325cf0cb8c113ce07448af7a30", 0x6f}], 0x2, 0x0, 0x0, 0x840}, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x19) [ 1450.626411][T10794] mkiss: ax0: crc mode is auto. 23:41:13 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe3026}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macicel\\nd,iocharset=c']) [ 1450.928219][T10815] Unknown ioctl -1073172847 [ 1451.054495][T10814] ref_ctr_offset mismatch. inode: 0x42f1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1451.071091][T10825] Unknown ioctl -2145892025 23:41:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0xffffffa4}, 0x20) [ 1451.186169][T10815] Unknown ioctl -1070571007 [ 1451.229598][T10794] mkiss: ax0: crc mode is auto. [ 1451.335890][T10815] Unknown ioctl -1073462522 [ 1451.480040][T10832] Unknown ioctl -1073172847 [ 1451.525376][T10815] Unknown ioctl -2145892025 23:41:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macicela\\d,iocharset=c']) 23:41:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x10, r1) 23:41:14 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1451.749316][T10855] Unknown ioctl -1073462522 23:41:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x8000000000000}, 0x20) [ 1451.888632][T10846] Unknown ioctl -1070571007 [ 1452.065784][T10863] ref_ctr_offset mismatch. inode: 0x40f9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macicelan.,iocharset=c']) [ 1452.155271][T10867] mkiss: ax0: crc mode is auto. 23:41:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044000000000046304400000fb00"], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x5) 23:41:15 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0xa4ffffff00000000}, 0x20) [ 1452.539542][T10867] mkiss: ax0: crc mode is auto. 23:41:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macicelan/,iocharset=c']) 23:41:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9d, 0x141000) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000100)={'rose0\x00', 0x80000000}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r2 = gettid() capset(&(0x7f0000000140)={0x20080522, r2}, &(0x7f0000000180)={0x2, 0x7, 0x8b, 0x0, 0x0, 0x2}) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0x8, 0x4) 23:41:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x4, 0x6, 0x4d}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:15 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:15 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x8}, 0x20) 23:41:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=macicelan\\,iocharset=c']) [ 1453.295571][T10923] binder: 10917:10923 unknown command 4 [ 1453.432565][T10925] mkiss: ax0: crc mode is auto. [ 1453.467867][T10923] binder: 10917:10923 ioctl c0306201 20000080 returned -22 [ 1453.468042][T10934] debugfs: File '10917' in directory 'proc' already present! 23:41:16 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1453.667075][T10936] ref_ctr_offset mismatch. inode: 0x4102 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x80000}, 0x20) [ 1453.818324][T10934] binder: 10917:10934 unknown command 4 23:41:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland8iocharset=c']) [ 1453.989959][T10923] debugfs: File '10917' in directory 'proc' already present! 23:41:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8001, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x4, 0x3}) 23:41:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1454.160472][T10934] binder: 10917:10934 ioctl c0306201 20000080 returned -22 [ 1454.315897][T10929] ref_ctr_offset mismatch. inode: 0x4102 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0xa4ffffff}, 0x20) [ 1454.452866][T10968] mkiss: ax0: crc mode is auto. 23:41:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x40, 0x7, 0x2, {0x77359400}, 0x100000001}) 23:41:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,%ocharset=c']) 23:41:17 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0xffffffa4}, 0x20) 23:41:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,\\ocharset=c']) 23:41:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) mkdirat$cgroup(r2, &(0x7f0000000000)='syz\xff\xda', 0x1ff) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000440)) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000180)) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000380)={0x6, 0x7f, "36e193d30ee269b1f8cc023aed0c152c352f600019c42b094b0ceb2a2f236fd93008da5af187f45e8756340fa57ac8098817bd8cfe5d1047ca6d6f7720acc3bf2cad2dbc1425a518c4c91f709d60c57b40ef96801958aa752fe18e1fd8a4024cad86b4ec262a4381e0488dd95d8ba706d68289417ac4fd19007858c0242877"}) r3 = getpid() fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r3}) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) listen(r1, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x7, @dev={[], 0x25}}, 0x22, {0x2, 0x4e20, @empty}, 'caif0\x00'}) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04720440abc758b80463a537ef920000a7e525aef3c32b96bf11ae0e2364514537eb22ab4dd9a1c393307535dbdf4b4e2ebb6e9de986c085f12b72432023bd4a81956b5f77330804657be61aed773eb7cbff1205d5d8a7e8c44396ffe83f23c4a9f5a8ad540baed56ca080c8542f275521b89f37f692c36bee7d54b3ee6a3fecfe3bd5d7c96997e6a4aafc115deb48f3d356c6db425f5162fcdf61df6ed5d3e1dc625f977c9f460c40900bdeb04551118f81d9c93624580c9e7b4f76f13faa5cfa4cc48a5ae6ad72bd5a0fd57d4ca76aeeb3654fe2c4931e042b45d342fa919c6ff0ec50"], 0x0, 0x0, 0x0}) 23:41:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1455.265321][T11004] ref_ctr_offset mismatch. inode: 0x40ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x8000000000000}, 0x20) 23:41:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,i\\charset=c']) 23:41:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) clone(0x2000000, &(0x7f0000000100)="2b201bfb4a7cc6ec55d9cf6aac3aa648d05ec24e09a5d29a956f4967bb41c27ae380025fee24c90cc3255d8caf7d46b30e9920fa274c0839ae4bcaa45040939b451480dcc1b98c5fe986327916f957e42fa5980900886eeb5388856239f688bf76e8eaf454557abee5061720fd79a710a0875c34bc158e32bb8a15ca1e1810616abe3435b95a227e4a9ed234f2a94ff6555e9d22cc6157c352e723602a80154c4183789c705120e5ead4c54bac2f7ed72b2bfcef32aea3c51e6d98fe3833fa271680aa285137463918788d0e1ae8704b1e42b55e8394cd854ad227fb96", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="22681a0c6a9bfd61e47d91291dbdca91bf360de34b95c4671dafd79cc9190987e4b317953d199b5c777cb368d777c5f22b8bb62485afd74c9fd3add78d9924ebd9316061c1cc22be10b80e825cb241b22ad066ec15f17552967b12c7dc0bd033d99547520a10c291aa49f313f26803c7be9702c3a8dac2395138e9597f4ba761ad0bfabf68ea4ee04ff0b1ca4c7091150d552010df809366027e7950af35126868947b3182b9d33fd6efb04d3c05b84fadffeba78a1911a082c5020bdced09d8a382248d151dddfd55c26b3e57f854fbfdda78732870942b43876217a9c16fabb65598d1b5a0e3ad9703b0fad28cb260b4da97d1b602fbad7fa2800ed587d8") ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0xa4ffffff00000000}, 0x20) 23:41:18 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1456.058288][T11015] binder: 11011:11015 unknown command 1074033156 23:41:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,ioch\\rset=c']) [ 1456.144181][T11015] binder: 11011:11015 ioctl c0306201 20000080 returned -22 [ 1456.175547][T11045] ref_ctr_offset mismatch. inode: 0x40de offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x20) [ 1456.523494][T11041] mkiss: ax0: crc mode is auto. 23:41:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochar#et=c']) [ 1456.554580][T11052] binder: 11011:11052 unknown command 1074033156 [ 1456.820117][T11052] binder: 11011:11052 ioctl c0306201 20000080 returned -22 23:41:19 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x80000}, 0x20) 23:41:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x88000) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xfffffffffffffff8) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/153) 23:41:19 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1ff, 0x200) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x76) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000140)={[{0x9, 0xfffffffffffffffa, 0x2, 0x80000001, 0x6, 0x80, 0x2, 0x3, 0xfffffffffffffffb, 0x188a, 0x9, 0x4f5, 0x8673}, {0x80, 0xca, 0x9, 0x200, 0x0, 0x1, 0x800, 0x6, 0x7, 0xffffffffffffffd3, 0x8f0f, 0x40, 0xfff}, {0x1, 0x3, 0x1, 0x1, 0x1, 0x400, 0x0, 0x1, 0x80, 0x4, 0x5, 0x6, 0x6}], 0xf3a}) 23:41:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochar%et=c']) 23:41:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0xa4ffffff}, 0x20) 23:41:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1457.388336][T11098] ref_ctr_offset mismatch. inode: 0x4191 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochar*et=c']) [ 1457.487291][T11089] mkiss: ax0: crc mode is auto. 23:41:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xfffffffffffffff7, 0x14000) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000480)={{&(0x7f0000000100)=""/18, 0x12}, &(0x7f0000000440), 0x50}, 0x20) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='vcan0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xb12fe3daf98b9816, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote}}, 0x1e) 23:41:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) 23:41:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0xffffffa4}, 0x20) [ 1458.056928][T11132] mkiss: ax0: crc mode is auto. [ 1458.062314][T11133] binder: 11124:11133 unknown command 2080662276 23:41:20 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochar+et=c']) [ 1458.158022][T11133] binder: 11124:11133 ioctl c0306201 20000080 returned -22 23:41:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x8000000000000}, 0x20) [ 1458.269086][T11132] mkiss: ax0: crc mode is auto. 23:41:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochar-et=c']) [ 1458.397105][T11140] binder: 11124:11140 unknown command 2080662276 [ 1458.403614][T11140] binder: 11124:11140 ioctl c0306201 20000080 returned -22 [ 1458.493125][T11162] ref_ctr_offset mismatch. inode: 0x410b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 23:41:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0xa4ffffff00000000}, 0x20) 23:41:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1458.996356][T11188] mkiss: ax0: crc mode is auto. 23:41:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440e9db8f7729854ec69d7eacff"], 0x0, 0x0, 0x0}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4) 23:41:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochar.et=c']) 23:41:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) 23:41:21 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochar0et=c']) 23:41:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x20) 23:41:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x7fffffff, 0x0, 0x38000000, 0x40, 0x6, 0xffff, 0x3, 0x4, 0x0, 0xff3f, 0x3, 0xff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) [ 1459.483548][T11220] binder: 11212:11220 unknown command -967932631 [ 1459.516022][T11218] ref_ctr_offset mismatch. inode: 0x40da offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1459.605519][T11220] binder: 11212:11220 ioctl c0306201 20000080 returned -22 23:41:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1459.714204][T11222] binder: 11212:11222 unknown command -967932631 23:41:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharXet=c']) [ 1459.813033][T11222] binder: 11212:11222 ioctl c0306201 20000080 returned -22 [ 1459.849861][T11235] mkiss: ax0: crc mode is auto. 23:41:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff}, 0x20) 23:41:22 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1460.039690][T11237] mkiss: ax0: crc mode is auto. 23:41:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ftruncate(r0, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r2 = eventfd2(0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0)=r2, 0x1) 23:41:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochar\\et=c']) 23:41:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffa4}, 0x20) 23:41:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101000, 0x0) chroot(&(0x7f0000000040)='./file0\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) getpid() ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) [ 1460.500013][T11275] mkiss: ax0: crc mode is auto. [ 1460.702346][T11270] ref_ctr_offset mismatch. inode: 0x40e1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04630000006321383b2722f0ba4dc3900000000003bc5de04e64adcce53247ba18ac2472b25871a0c67f9ee430896a0bbd83b0447467aad952f85f1612644c653bc0332434"], 0x0, 0x0, 0x0}) 23:41:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharcet=c']) 23:41:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x20) 23:41:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000080)={0x3, "b61bc1"}, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) [ 1461.135898][T11315] binder: 11310:11315 unknown command 25348 23:41:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000}, 0x20) [ 1461.276572][T11315] binder: 11310:11315 ioctl c0306201 20000080 returned -22 23:41:23 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1461.354915][T11325] mkiss: ax0: crc mode is auto. 23:41:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1461.425716][T11315] binder: BINDER_SET_CONTEXT_MGR already set [ 1461.429117][T11330] binder: 11310:11330 unknown command 25348 23:41:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochardet=c']) [ 1461.584130][T11315] binder: 11310:11315 ioctl 40046207 0 returned -16 [ 1461.703383][T11335] ref_ctr_offset mismatch. inode: 0x40dc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1461.715454][T11330] binder: 11310:11330 ioctl c0306201 20000080 returned -22 [ 1461.744243][T11327] mkiss: ax0: crc mode is auto. [ 1461.751298][T11345] mkiss: ax1: crc mode is auto. 23:41:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x2) 23:41:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x101007, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'bridge0\x00', @local}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xf9, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 23:41:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochariet=c']) 23:41:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1462.385108][T11383] binder: 11382:11383 unknown command 1986356271 23:41:25 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x3) 23:41:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharlet=c']) [ 1462.624196][T11383] binder: 11382:11383 ioctl c0306201 20000080 returned -22 [ 1462.654553][T11397] ref_ctr_offset mismatch. inode: 0x40fb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1462.787198][T11402] binder: 11382:11402 unknown command 1986356271 23:41:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1462.895838][T11402] binder: 11382:11402 ioctl c0306201 20000080 returned -22 [ 1462.970173][T11407] mkiss: ax0: crc mode is auto. 23:41:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x4) 23:41:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharoet=c']) 23:41:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000040)={0x3, 0xff, [{0xffffffff, 0x0, 0x8000}, {0x3, 0x0, 0x2}, {0x2, 0x0, 0x3}]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x40, @loopback, 0x5}], 0x1c) 23:41:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x5) 23:41:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1463.634191][T11437] binder: 11434:11437 ioctl 8188aea6 20000040 returned -22 [ 1463.707637][T11437] binder: 11434:11437 ioctl 8188aea6 20000040 returned -22 [ 1463.860055][T11446] mkiss: ax0: crc mode is auto. 23:41:26 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharpet=c']) 23:41:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x6) 23:41:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630440000000000463044000000800"], 0x0, 0x0, 0x0}) [ 1464.054464][T11457] ref_ctr_offset mismatch. inode: 0x40fa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1464.101611][T11449] mkiss: ax1: crc mode is auto. [ 1464.431382][T11446] mkiss: ax0: crc mode is auto. 23:41:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharuet=c']) 23:41:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x7) 23:41:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RWRITE(r1, &(0x7f0000000340)={0xb, 0x77, 0x1, 0x9}, 0xb) bind$x25(r2, &(0x7f00000003c0)={0x9, @remote={[], 0x3}}, 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/214, 0xd6, 0x1, 0x16}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/40, 0x28, 0x1, 0x12}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x1400}], 0x0, 0x0, 0x0}) 23:41:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x8) 23:41:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6, 0xae30, 0x8, 0xffffffff00000001, 0x0, 0x28, 0x103, 0x2, 0x1, 0x2, 0x5, 0x0, 0x4, 0x0, 0x90b, 0x8a, 0xfffffffffffffe01, 0x9e8, 0x200, 0x383c, 0x3, 0x7, 0x5e28, 0x100000001, 0x4, 0x2, 0x3ff, 0x8001, 0x2, 0x800, 0x6, 0x2, 0x9c, 0x2, 0x6, 0x9, 0x0, 0x100, 0x4, @perf_config_ext={0xfffffffffffffe00, 0x8}, 0x8004, 0x9, 0x6000000, 0x3, 0x9, 0x7, 0x5}, 0x0, 0xf, r1, 0x2) 23:41:27 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharxet=c']) 23:41:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1465.610783][T11526] mkiss: ax0: crc mode is auto. 23:41:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0xb) [ 1465.839276][T11519] ref_ctr_offset mismatch. inode: 0x4127 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4200010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x148, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb681}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4a4d}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2800}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x557f2787}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffc1}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x10) [ 1466.058804][T11543] mkiss: ax0: crc mode is auto. 23:41:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochars%t=c']) 23:41:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = dup(r0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={r2, &(0x7f0000000100)=""/109}) 23:41:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x10) 23:41:29 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0463044000000000046304400000124d36bcd9eaa4e61c8fd90b0000"], 0x0, 0x0, 0x0}) [ 1466.815006][T11570] mkiss: ax0: crc mode is auto. 23:41:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochars\\t=c']) [ 1467.014067][T11585] ref_ctr_offset mismatch. inode: 0x414d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x11) [ 1467.130418][T11578] mkiss: ax0: crc mode is auto. 23:41:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[0x0, 0x80000], [], @remote}, 0x800, 0x1}, 0x20) 23:41:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x10040) recvfrom$rose(r1, &(0x7f0000001040)=""/4096, 0x1000, 0x40012003, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) write$FUSE_ENTRY(r1, &(0x7f00000002c0)={0x90, 0x0, 0x4, {0x6, 0x2, 0x8b8f, 0x2, 0xff, 0x9, {0x4, 0xff, 0x5, 0x1, 0x1f, 0x3, 0x1000, 0x2, 0x2, 0x7, 0x1000, r2, r3, 0x7}}}, 0x90) 23:41:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharsyt=c']) 23:41:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x12) 23:41:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0xffffffff, 0x4) 23:41:30 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1468.076211][T11638] mkiss: ax0: crc mode is auto. 23:41:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x4, {0xfe00000000, 0x2, 0x40, 0x1f, 0xff, 0x1f}, 0x0, 0x2}, 0xe) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharse\\=c']) [ 1468.291332][T11647] ref_ctr_offset mismatch. inode: 0x414d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1468.509615][T11654] debugfs: File '11653' in directory 'proc' already present! 23:41:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2eaa9e24, 0x2000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0x8, @rand_addr="390809bf56f178de2a8dcb813827c924", 0xfd3b}}, 0x800, 0x400000}, 0x90) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x13) 23:41:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) [ 1468.726805][T11666] debugfs: File '11653' in directory 'proc' already present! 23:41:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d10"]) 23:41:31 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2630feff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1469.197272][T11679] mkiss: ax0: crc mode is auto. 23:41:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x14) 23:41:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000280)=""/130) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x40000) sendmsg$inet6(r2, &(0x7f0000000740)={&(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)="ab081734aa0646356c7b4a63ee745fc7de174f5ac0f7be636ef8e3f0f3a6e3fda9f40934706a63956f446efdc72b42aadaf568a290bedd07829c08c29db6ce36d709c1231cefec37bff6207c025ecee384f7bbb587de8f38062f950f01f0b3dc7aa498028c15d8ccc400d4dff53022fafead69ca1488e2916356104aa491e1b43ea908005395275e0c52bf2afb65af1e8f8e972230be39075e36ab63229b36e81f20badf9fc722f06fdd2849", 0xac}, {&(0x7f00000003c0)="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", 0xfa}, {&(0x7f00000001c0)="8bf4ebd4b72eb36ee20b183c85e3b45c6bc3f33b37500e5792c35509a68e47cfd4a64b5ebb7b8d3052889761018a4476626f818e3a664bd3376bbd6073a42362cad6b528d18c382510cba21d31be33567b235d8db7014b2c74954f0c758f53c6bb2828e67e06f3ffe0fbbe4baa1f1bb33f2116fbe7cff6d1e1a7af2586454e52ab7c0fbfe8448edecadd85", 0x8b}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x280}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffffbcad249c) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharc\x00\x00\x00\x00']) statfs(&(0x7f0000000780)='./file0\x00', &(0x7f0000000c00)=""/4096) 23:41:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffe9) 23:41:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000040)='./file0\x00') [ 1469.659598][T11679] mkiss: ax0: crc mode is auto. 23:41:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="696f636861727365743d6d61636963653d63011d9f80d3fc6562f91e0e32f18a1a9af20943118a9604f856b26cad8f0b56b75aec77ab6090450d751d2cb702b76259442e9a72002aa3db241313d8de26fdc5519c8932ad1be9820641d54143ae7153e7003e187a56c6a560dd00"/122]) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x100000, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x400000000}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\xb0'}}, {@smackfshat={'smackfshat', 0x3d, 'cpuset)2vboxnet0#'}}]}) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000380)={0x9045, 0x17, 0x400, 0x9246, "c6fee0f122c182be337ef28244709bd7f61624f32c9d3142fb6ad80f3f3dce4f"}) [ 1470.049849][T11708] sp0: Synchronizing with TNC 23:41:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x15) [ 1470.163162][T11715] sp0: Found TNC 23:41:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x1}) 23:41:32 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="204e8792b16b02630440000000a5044b"], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x0, 0x1, 'client1\x00', 0xffffffff80000004, "bbc225726172dbfa", "7aecca0e2ece1d0eb082c4d1aa1cb32d5b4069e3c0433dcfa8351d5ac566cacc", 0x7fffffff, 0x800}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x8000, 0x0) 23:41:33 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1470.687761][T11750] binder: 11745:11750 unknown command -1836626400 [ 1470.715390][T11746] mkiss: ax0: crc mode is auto. 23:41:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x16) [ 1470.792967][T11751] ref_ctr_offset mismatch. inode: 0x42c1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1470.974846][T11750] binder: 11745:11750 ioctl c0306201 20000080 returned -22 [ 1471.124821][T11762] binder: 11745:11762 unknown command -1836626400 [ 1471.171254][T11772] FAULT_INJECTION: forcing a failure. [ 1471.171254][T11772] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.233614][T11762] binder: 11745:11762 ioctl c0306201 20000080 returned -22 [ 1471.358719][T11752] mkiss: ax0: crc mode is auto. [ 1471.415586][T11765] mkiss: ax1: crc mode is auto. [ 1471.528773][T11772] CPU: 0 PID: 11772 Comm: syz-executor.3 Not tainted 5.3.0-rc6+ #122 [ 1471.537521][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.547690][T11772] Call Trace: [ 1471.551007][T11772] dump_stack+0x172/0x1f0 [ 1471.555721][T11772] should_fail.cold+0xa/0x15 [ 1471.560447][T11772] ? fault_create_debugfs_attr+0x180/0x180 [ 1471.566371][T11772] ? lock_downgrade+0x920/0x920 [ 1471.571325][T11772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 23:41:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x48a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0xfffffffffffffffb, 0x1, 0x8e92, 0x0, 0x5, 0x3, 0x2c, 0x9, 0xf4, 0x3, 0x100, 0x40}) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642e696f636861727365743d6393083358f9d6efa7abc4d89e23083b9c2b32ba5cacc00cc8e65a"]) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x3f, @rand_addr="479cfdb10ebc2054ccecfe9bcd78c058"}}, 0x81, 0x81}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)={r2, 0x800, 0x69, "5ab2233c81100d7abc29d5cca51ebc5df9931b7a041d79e26d1450c237ca1666cf1676abc9a7b5bf4cec503d39c91d80831b4694c69067b61fd348ebb0d39a2d5405d9efb6bf6e6b60f271066543b005bf2ce14b721fe7d53a209157936e6da55c949450a0206a0ee1"}, 0x71) [ 1471.577807][T11772] ? debug_smp_processor_id+0x3c/0x214 [ 1471.583476][T11772] ? ___might_sleep+0x163/0x280 [ 1471.588444][T11772] __should_failslab+0x121/0x190 [ 1471.593812][T11772] should_failslab+0x9/0x14 [ 1471.598670][T11772] __kmalloc+0x2e0/0x770 [ 1471.603208][T11772] ? mark_held_locks+0xf0/0xf0 [ 1471.608630][T11772] ? _parse_integer+0x190/0x190 [ 1471.613762][T11772] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1471.619780][T11772] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1471.625803][T11772] ? tomoyo_path_number_perm+0x193/0x520 [ 1471.632059][T11772] tomoyo_path_number_perm+0x1dd/0x520 [ 1471.638079][T11772] ? tomoyo_path_number_perm+0x193/0x520 [ 1471.644181][T11772] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1471.650370][T11772] ? perf_trace_lock_acquire+0xf5/0x530 [ 1471.656158][T11772] ? ___might_sleep+0x163/0x280 [ 1471.661132][T11772] ? selinux_file_mprotect+0x620/0x620 [ 1471.666968][T11772] ? __fget+0x384/0x560 [ 1471.671336][T11772] ? ksys_dup3+0x3e0/0x3e0 [ 1471.676037][T11772] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1471.682303][T11772] ? fput_many+0x12c/0x1a0 [ 1471.686757][T11772] tomoyo_file_ioctl+0x23/0x30 [ 1471.691585][T11772] security_file_ioctl+0x77/0xc0 [ 1471.696761][T11772] ksys_ioctl+0x57/0xd0 [ 1471.700952][T11772] __x64_sys_ioctl+0x73/0xb0 [ 1471.705564][T11772] do_syscall_64+0xfd/0x6a0 [ 1471.710093][T11772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1471.716388][T11772] RIP: 0033:0x459879 [ 1471.720315][T11772] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1471.740895][T11772] RSP: 002b:00007fe5e5ae2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1471.749332][T11772] RAX: ffffffffffffffda RBX: 00007fe5e5ae2c90 RCX: 0000000000459879 [ 1471.758071][T11772] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1471.766070][T11772] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 23:41:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1471.774485][T11772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5e5ae36d4 [ 1471.782715][T11772] R13: 00000000004c41b3 R14: 00000000004d83c8 R15: 0000000000000004 23:41:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x17) 23:41:34 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iockarset=c']) 23:41:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x1e8, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 23:41:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x3, 0x101, 0x9, 0x5, [], [], [], 0x6, 0x0, 0x1c, 0xcd, "6618a93038ae29aa0f96d73b0d8787fe"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1472.901596][T11818] mkiss: ax0: crc mode is auto. 23:41:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x18) [ 1472.990299][T11825] ref_ctr_offset mismatch. inode: 0x4311 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1473.066339][T11830] binder: 11826:11830 unknown command 0 [ 1473.221674][T11830] binder: 11826:11830 ioctl c0306201 20000080 returned -22 [ 1473.361137][T11841] binder: 11826:11841 unknown command 0 [ 1473.467235][T11841] binder: 11826:11841 ioctl c0306201 20000080 returned -22 [ 1473.657780][T11772] ERROR: Out of memory at tomoyo_realpath_from_path. 23:41:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:37 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mkdir(&(0x7f0000000240)='./file0\x00', 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x10, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e, 0x80000) r2 = syz_open_dev$amidi(&(0x7f0000000700)='/dev/amidi#\x00', 0x7, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'\x01\x02\x00\x02\x00', r3}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000002c0)=""/91, &(0x7f0000000200)=0x5b) 23:41:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x19) 23:41:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x84001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:37 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) r3 = getpgrp(0x0) kcmp(r2, r3, 0x5, r1, r0) ioctl$RTC_UIE_OFF(r1, 0x7004) 23:41:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000000c0)='vboxnet1lovmnet1em1eth1].\x00', &(0x7f0000000100)='./file0/file0\x00', r1) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f63686172732574276d61636963656c616e642c696f636861727365743d63ef6f2f001300ead59e8dd8edf81cac3b8cde99b059607284489fb47863a0876b05956e8afa24458101f7c16191eb465ae2ba59ea84098b9f56669711f60a6d6f061820d649498b8eb58590541f0e38a73f1bddcf6d1e1ac152125087545f71ac5a7dabc6698b50ed16a5acb59551"]) 23:41:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x1a) 23:41:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1475.286566][T11878] ref_ctr_offset mismatch. inode: 0x43a1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x6800, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0xf98, 0x8, 0xe3, &(0x7f00000000c0)="f46a8b79547629caa2355a9c55acda27cd0e7b4326468012426043ed0dad716a8b3da7fdca5ce30a46437e1ede6b52ae154a833b7a7ee79cc145b499c3de0a1dc0849cb8df30a2591c1f879ab25b78be533e967c3b002ae375bf81ff19509af601abe1e2e69463efe694dc2ad7a9046af72ad8035e2ac79e06bb3a73ecd014af361db236e7abdb088a8d4681aded040e3bdd06812e54fd6a9a731ece2a955b663f4db179771eb3b7a383b61f015eab8d89c1ee6eba48a98cb59660ca27bc0212846d402f31c23cc0bd7cf5bf2dd86e4328d1002363b0726d27181f1ea4f3330bd2c296"}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1475.656000][T11875] ref_ctr_offset mismatch. inode: 0x43a1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1475.711770][T11888] mkiss: ax0: crc mode is auto. 23:41:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x1b) 23:41:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d63f7234c6d041002ceb6a5f5bedde3bb0b46c16299116fa6ad8db6543842d741cffd63bf5b5d7ab994ae0bfc8cddaf1b1ff630055eaf1b537f66cefedb23c5517868522db9204550c23583f4545704303b03ba7c09f73d3b0800f6884e8fca0a39e289d058b6221ccd6f577f86d861ca4312cb5a980872af6520c42df40538ae0798d23993a4bf27a1498b2a88122a94217132"]) 23:41:38 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xf) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x1}}, 0xfffffffffffffecd) 23:41:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000180)=0x400000000000000) 23:41:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x3, "ecf49b"}, &(0x7f0000000100)=0xb) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0xff80, 0x5, [0x1, 0xfffffffffffffff7, 0xbfa4, 0x100000000, 0x100]}, 0x12) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000300)={0x4f8, 0x8, [0x1000, 0x100000001]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6c}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:38 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x181400, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) getxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'system.', 'hfs\x00'}, &(0x7f00000003c0)=""/213, 0xd5) prctl$PR_SET_DUMPABLE(0x4, 0x2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) connect$llc(r1, &(0x7f0000000280)={0x1a, 0x201, 0x4, 0x6, 0x6, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 23:41:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x1c) 23:41:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x161, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) r3 = geteuid() lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000140)="5717a1b832391538888623fb72bbbae995b455b3d4f373ed5b6b0405a06f5459c2d508220ca0db68b8825b21e3bfda655f5f578f436912dc978ed8305f80d87fab9f21ad331f3b2df33c2d886840adf8255868dec74d61e9390811079571b380bad1d3f0f049d4af8026ee965150e1836250d3104dcac0a7f8cc4736ffa57fe9af94c8d4d5b6fb5a33fcbc828989063c", 0x90, 0x94}, {&(0x7f0000000200)="cec092bfa8ef036bee405e2c2833237223793552cfb8b53c77cb4dc5dca287755bcce443ae40c04871ba0c3fb4572e6478b5d03f44be4c2e1bc45c2111b0a311690290026e7739103756a8501f4903fde66ed0a72d84f74a771032615ec99c78d646a4aa00c66abe4c09e3cf4a59c09baf2763b7a243976ec26950cd7cbd51b3076ebfbcb86f54ad73be7374598f2ccc8b0e5d21bff6ef0c1e4ec6764a3758a3b8ad3f96a240d97eb0f94d90ee4bf4c22bf2c7", 0xb3, 0x2000}, {&(0x7f00000002c0)="3f8b1d04cc8f247b21e4f66c1714e50097d1e4e31a9123b7352ea7d6e12ccd4f56ded5245831c56eafaef7ab39509a7c391f1780feda825b9eea0e40555e97a46a157ca549381fead1634768c654d1ab00e8760b814f3c9eae30445d8387fd2957862395e75c6aeed75a2fabd720877262d00e33529a1b28f4ddba9e001e4beb0874421553f0e77358efa1dea98d42bb3eb4c4b2ea6f963863a800b37c345c32e48d10a39a1563afd7a327df348e5aaa78b4a5d8aea4e36b87c2f5c2046b22c8679746112bf70c7b6238cf4920816261fdbf8c8d0edb9464a20672d07332fe020072d29006887cb4c22517b19e15cf9cc71e35204dc213", 0xf7, 0x4}, {&(0x7f00000003c0)="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", 0xff, 0x5}], 0x100000, &(0x7f0000000740)={[{@whint_mode_user='whint_mode=user-based'}, {@inline_xattr='inline_xattr'}, {@disable_roll_forward='disable_roll_forward'}, {@alloc_mode_def='alloc_mode=default'}, {@noflush_merge='noflush_merge'}], [{@subj_role={'subj_role'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@hash='hash'}, {@dont_hash='dont_hash'}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_type={'subj_type', 0x3d, '/dev/binder#\x00'}}, {@euid_gt={'euid>', r4}}, {@hash='hash'}]}) [ 1476.416113][T11924] mkiss: ax0: crc mode is auto. [ 1476.699758][T11924] mkiss: ax1: crc mode is auto. [ 1476.708288][T11928] mkiss: ax0: crc mode is auto. 23:41:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x1d) 23:41:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f636861727365743d6d61636963f508656c616e642c696f63686172736574"]) [ 1476.881187][T11964] binder: 11955:11964 ioctl c0306201 20000080 returned -14 [ 1476.896418][T11941] ref_ctr_offset mismatch. inode: 0x4441 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2bbd9a6ce285c49f, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) [ 1477.100043][T11934] mkiss: ax0: crc mode is auto. [ 1477.187865][T11970] binder: 11955:11970 ioctl c0306201 20000080 returned -14 23:41:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 23:41:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@default, @remote, @default, @bcast, @null, @netrom, @netrom, @rose]}, &(0x7f00000000c0)=0x48, 0x80800) r2 = socket$inet6(0xa, 0x0, 0x400) bind(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x407, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd8e, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b006791931e1a4e82af161fb553b8efe7c9fbee0b5b83bb9aaa7afdbfc7c88846266ac714bf5ee2e618f6a6ae310ccae8b06de7decec006c89deda26058a4731cfa46952c8393b12e06d3253785d8816e977d1f4ea4cbc570f5a00638e30f484a5ca6b9aded70bb3719ac8b2776758dd9507dc5608f0f8a7bb79be3e51726196ad76da7571fba76147e46e619c1aba15f8b77606d3261c2c1ffffff7f80"], 0x0, 0x0, 0x0}) [ 1477.477565][T11995] mkiss: ax0: crc mode is auto. 23:41:40 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x1e) 23:41:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x400000000, 0x400000) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2a) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f63686172736501006d61636963656c616e642c696f636861727365743d63"]) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) [ 1477.854879][T12030] ref_ctr_offset mismatch. inode: 0x43c1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4000000012) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) clock_getres(0x1, &(0x7f0000000040)) 23:41:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x21) 23:41:40 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80042, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x2ae81528, @bearer=@l2={'ib', 0x3a, 'bcsh0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xfffffffffffffff8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xcf, 0x0, &(0x7f0000000280), 0x8a, 0x0, &(0x7f0000000380)="8dcf1dfd3a438b783e7b828525e04eaacca05cf3e9755beec3c97339cb3f3c5d6227fe0b3439f4c3d0f635957dfe5c40e9c0590860d56d7ede621faad5b8fd6a68965580e585b4cf3480000400084ec62aa145917163526d08bd08f239093647a1f8b7b0fa2d0300b05eee2cd6fb4528e78ef2a6c09d39098b2ac272878218be820800000000000000000000000000009a70e4ce73897886576196beb21ecacabc9d200c6620c72be4113f05543ede81ef06f6e69ffa4b44709c"}) 23:41:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) r2 = fcntl$dupfd(r1, 0x406, r0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:40 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x8, 0x6, 0x6, 0x80000000000000}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x81}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r3, 0x9, 0x7fffffff, 0x1f, 0x8, 0x289f}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0xfff, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xffffffc0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video37\x00', 0x2, 0x0) [ 1478.459404][T12055] mkiss: ax0: crc mode is auto. 23:41:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x22) 23:41:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x9, 0x6, 0x8, 0x5}) 23:41:41 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1478.590587][T12056] binder: 12054:12056 unknown command 0 [ 1478.719986][T12056] binder: 12054:12056 ioctl c0306201 20000180 returned -22 [ 1478.772577][T12062] mkiss: ax0: crc mode is auto. [ 1478.874675][T12055] mkiss: ax1: crc mode is auto. [ 1478.889921][T12082] binder: 12054:12082 unknown command 0 23:41:41 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x8000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x7ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x23) [ 1479.034690][T12082] binder: 12054:12082 ioctl c0306201 20000180 returned -22 [ 1479.104864][T12091] ref_ctr_offset mismatch. inode: 0x44b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1479.126752][T12071] mkiss: ax0: crc mode is auto. 23:41:41 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x3822, 0x40400) socket$caif_stream(0x25, 0x1, 0x3) pidfd_send_signal(r0, 0x22, &(0x7f0000000180)={0x216, 0x1, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) sysfs$2(0x2, 0x7, &(0x7f0000000040)=""/76) 23:41:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = getpid() r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x200900) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0x4, 0x5, 0x4, 0x2}, 0x8) prctl$PR_SET_PTRACER(0x59616d61, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10040, 0x0) ioctl$TCSETXF(r4, 0x5434, &(0x7f00000000c0)={0x7, 0x1e, [0x1ff, 0xfffffffffffffc01, 0x1f, 0x8000, 0x41], 0x81}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="8463db98f3bbde58400d83cbac47dc1e794981fed9faf9d05dcce749837833d7554cef9e257364141e0aada7a80c7fc41d42a2ddf562648924980ebf2a2570053ec65edc0a9c96765f94acff98305ac100"/91], 0xfffffffffffffd21, 0x0, 0x0}) prctl$PR_GET_FP_MODE(0x2e) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={r5, 0x73, "d8042ebdbb32227e01fff841713ab46ac8e08c2e5519cda1c3fb87670fddd05ff6efbc99c722bd73a51ada96d035a8be36ee5dd1aafa595fa2309ac920c8c0001fe50021631f805b832be7fd459f5e3a340a65805723c7ee5e191315de11bca6caf4fe2ac9f96ea77c27e91268ea3e13661a56"}, &(0x7f0000000300)=0x7b) 23:41:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x35, 0x400000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000002c0)=""/185) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x5, 0x7, 0x7, 0x0, 0x0, [{r0, 0x0, 0xffffffffffffffc1}, {r0, 0x0, 0x100}, {r0, 0x0, 0x4}, {r0, 0x0, 0x8001}, {r0, 0x0, 0x3}, {r0, 0x0, 0x3}, {r0, 0x0, 0x5}]}) 23:41:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000200)) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x4, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e646c696f636861727365743d633841b420033b9c6bad88b66c74b8c2cb2693e56ea161f8ce5e5f3e608f354550f87a6ef2c6baa6f88e8030026c544807973730a83e1b8021db2d017427ca072764b1d236b71d035cc0b9060ebbee53edf54bf42d06f224b37e2864239a19cc86ec2cd1abb37d15c9831b6d0e352532c3260c2e558ed5efc7b849c2c0ac71394d291a7088b9c913125e75f6f141f902a1762a525dba52affad00b37127dcb29fbeb64e1d6f3195a4fde8bc6c0f2a93931aa4d4a604497cedaa07211882441f78ac4cd361777602c0bfa28265126facfa38cdb7cddb2c5ae4f07534d7d140fe283ee6ca80f59cb9c704b47b54ad06e62e5c55e4afec288d98ecef675489775d53e50c58a9eac5b8a571c5cfe47bae3070c"]) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 1479.656566][T12089] ref_ctr_offset mismatch. inode: 0x44b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1479.675736][T12127] binder: 12125:12127 unknown command -1730452604 [ 1479.724694][T12128] mkiss: ax0: crc mode is auto. 23:41:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x24) [ 1479.826906][T12127] binder: 12125:12127 ioctl c0306201 20000080 returned -22 23:41:42 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1480.040115][T12136] binder: 12125:12136 unknown command -1730452604 [ 1480.072619][T12128] mkiss: ax0: crc mode is auto. 23:41:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4(r0, &(0x7f0000000040)=@hci={0x1f, 0x0}, &(0x7f00000000c0)=0x80, 0x80000) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newaddr={0x5c, 0x14, 0x8, 0x70bd2a, 0x25dfdbfd, {0xa, 0x40, 0x54f9c49d9772974c, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x4, 0x6, 0x9b}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x5c}}, 0x4080) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x101100, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000440)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="69bba43ba04cb097d21d6c616e642c696f636861727365743d073332d097c43d7ecd801cd7414d7e1621264e20100851c5df0a5961fb6913d7cf9737a792fa6594458db94b576393e923bab810451aac772835f3586f019a50307e8fd14a7af0aee530359f1b7526941476674ed2a9a093afcb8205a6e318d2b7bfe02e35e386b0fe335e3c8e2784f3f6399c77"]) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000300)={0xcf2a, 0x1, 0x9}) flistxattr(r3, &(0x7f0000000400)=""/37, 0x25) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000580)={0xb53}, 0x1) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000640)=""/136, &(0x7f0000000700)=0x88) [ 1480.182802][T12136] binder: 12125:12136 ioctl c0306201 20000080 returned -22 23:41:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x2a) 23:41:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000100)={0x8001, 0xb, 0x3a, "48b90a0fbaae10dda65cf3593440aacfec4434305eb655a7b0b345e6d582d12bf5a8271f0df6f47a59cb7fb2dff4d12579961a32e37aad8de7cff83e", 0x6, "155853ab0fea40da23a9b46047509dc80b84a398a4076ee29faef0e4818c58eb74dd832dc33bdb78cc2b26f588c7b06fa79cf8e4173af7a8dc98d420", 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2002, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x26eaa136065e58ef, 0x90000000, 0x1}) r2 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x11400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@afid={'afid', 0x3d, 0x7}}, {@access_client='access=client'}], [{@fsmagic={'fsmagic'}}, {@obj_role={'obj_role', 0x3d, 'bdevppp1'}}, {@dont_hash='dont_hash'}]}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1480.648432][T12162] ref_ctr_offset mismatch. inode: 0x418f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1480.752080][T12173] mkiss: ax0: crc mode is auto. 23:41:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000001c0)={0xc, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x20, 0x0, 0x23}, 0x2c) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000240)={0x1, {}, 0x80, 0x6c}) 23:41:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x2b) 23:41:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = semget$private(0x0, 0x1, 0x403) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0xfff, 0x6ff3, 0x3, 0x4, 0x4, 0x6]) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) connect$rds(r3, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) [ 1481.204108][T12183] mkiss: ax0: crc mode is auto. 23:41:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40000) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1) 23:41:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5, "676a5f4f91"}, &(0x7f00000000c0)=0xd) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r3}, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) syz_mount_image$ntfs(&(0x7f0000000240)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x800, 0x0, &(0x7f00000002c0), 0x200000, &(0x7f0000000480)={[{@disable_sparse_yes='disable_sparse=yes'}], [{@euid_gt={'euid>', r4}}, {@uid_gt={'uid>', r5}}]}) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iochac\x00\x00\x00\x00\x00']) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)={r3, 0xa4}, &(0x7f0000000200)=0x8) r6 = semget(0x0, 0x1, 0x4) semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f0000000500)=""/121) socket(0x9, 0x1d507f9b89b1ca66, 0x4) 23:41:44 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x2c) [ 1481.690245][T12211] binder: 12204:12211 unknown command 0 [ 1481.740276][T12190] mkiss: ax0: crc mode is auto. [ 1481.877877][T12211] binder: 12204:12211 ioctl c0306201 20000080 returned -22 [ 1481.885161][T12223] binder: BINDER_SET_CONTEXT_MGR already set [ 1481.891627][T12223] binder: 12204:12223 ioctl 40046207 0 returned -16 [ 1482.145367][T12220] ref_ctr_offset mismatch. inode: 0x418f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) connect(r1, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x2, 0x5}, 0x80) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000040)={0x0, 0x1, [0xff, 0x2, 0x800, 0x5, 0x1], 0x1}) 23:41:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x181000, 0x0) write$capi20(r1, &(0x7f0000000040)={0x10, 0x57023fa8, 0x82, 0x83, 0x76, 0x81}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x2d) 23:41:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fd04630440000000000463044000000000"], 0x0, 0x0, 0x0}) [ 1482.989384][T12258] mkiss: ax0: crc mode is auto. [ 1483.074362][T12265] binder: 12264:12265 unknown command 73598205 23:41:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d638734d05a923def0b7bbee007115bfb939408cfa7ff66d106a59c930778ee4e75f8e611bd4b08e911b4c6aa276b4fd321bb110909910bb07e47d39ec8c852192bf3c86ed1a000"/116]) 23:41:45 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xc6011, r0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x80000001, 0x0, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x2}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x800}, 0x4) [ 1483.334364][T12265] binder: 12264:12265 ioctl c0306201 20000080 returned -22 23:41:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x2e) 23:41:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x1000, 0x7ff, 0x34, 0x3b0, 0x9, 0x8000, 0x100000001, 0xc, 0xffffffffffff1777, 0xf63a}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x5) [ 1483.547676][T12265] binder: BINDER_SET_CONTEXT_MGR already set [ 1483.547683][T12286] binder: 12264:12286 unknown command 73598205 [ 1483.547706][T12286] binder: 12264:12286 ioctl c0306201 20000080 returned -22 [ 1483.677634][T12284] ref_ctr_offset mismatch. inode: 0x40e1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1483.689420][T12265] binder: 12264:12265 ioctl 40046207 0 returned -16 23:41:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x38000000, 0x10}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={r2, 0x1}, &(0x7f0000000340)=0x8) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x13, "d488f2f6ffb4bc44f41e1ae7589796591830fd"}, &(0x7f0000000080)=0x1b) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x1d}, 0xffffffffffffffff}}}, 0x84) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x2f) 23:41:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/155, 0x9b}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0xffffffc0) [ 1484.142280][T12297] mkiss: ax0: crc mode is auto. 23:41:47 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x0, 0x6202, 0x9}) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1484.657509][T12315] mkiss: ax0: crc mode is auto. 23:41:47 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x6}, 0x8, 0x75636ac0c6ffe4cd) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80000001, 0x6a, 0x4, 0x9, 0x1000, 0x2, 0x5fb7b2cb5fe2d87f, 0x4, 0x58, 0x38, 0x279, 0x10000, 0x1, 0x20, 0x2, 0xb7, 0xf665, 0x4}, [{0x5, 0x0, 0x6a, 0x8000, 0x3ff, 0x8, 0x5, 0x3}], "271c3bd672e677b76a0ac167dedec8715d9790b86a50962650709dc6e6c9c6a20f66a483552d5246fbbe7e9f15d9965f1c3356599f28bba8321aecd4cd01283d4029c956b03ca6f3dcc3586406b94864dd8721d06cee64f7496a9ed6fe5bc6522821d6355e14e89e74c367aea90c838c89c882180312427d8f9dddd46339ac0aee3057", [[], [], [], [], [], [], [], []]}, 0x8db) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/full\x00', 0x4000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000a00)=0x100000001, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x30) [ 1484.995723][T12337] ref_ctr_offset mismatch. inode: 0x4139 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1485.272228][T12342] mkiss: ax0: crc mode is auto. [ 1485.272512][T12323] mkiss: ax1: crc mode is auto. 23:41:48 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=r1]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0xb, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @struct={0x5, 0x7, 0x0, 0x4, 0x1, 0x8001, [{0xd, 0x4, 0x4}, {0x9, 0x1, 0x5dd8}, {0x5, 0x3, 0x5}, {0x6, 0x5}, {0x4, 0x1, 0x3f}, {0x5, 0x3, 0x7}, {0x4, 0x1, 0x8}]}, @struct={0x10, 0x2, 0x0, 0x4, 0x6, 0x5, [{0x1, 0x3, 0x3ff}, {0x0, 0x5, 0x3}]}, @enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x8, 0xfffffffffffffffc}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0xff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x2e, 0x30, 0x71, 0x7f, 0x5f, 0x0, 0xa282b9b7de1bb2e6, 0x2e]}}, &(0x7f00000001c0)=""/214, 0xfb, 0xd6}, 0x20) 23:41:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x31) 23:41:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="04630440000000000463c80f000000000000f34000000000327ffb7dda2b953ad8a0eba17d28784451454a00b100000000e4bda5562295395a3f2d63e990b51b84a9b885643e264af4ef2b305d8d37f14b942b8c72288b4cfb99c32975281df4a6bb601e397a8e414b7b1b370192843c36d5f0ad14"], 0x0, 0x0, 0x0}) io_setup(0x401, &(0x7f0000000100)=0x0) r3 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1000000, 0x0) write$binfmt_misc(r3, &(0x7f0000000580)=ANY=[], 0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000140)="3df833a7cf2803bd5e0c139d1ca4e6d2e5616baab1f4df3c274dcc19e30ef877f689ba0e499c9812c462a50b744890687dbb6a0b948cf6a7047928a9d8757a0610ffc3368bbfa1bc769231478a52ae3832ac7bac0a4a72ecdf40a043aefc272244578e41baee70d0e2d784d64c9567d2cdd9fea8da6a21dfcacdfa21eb41b40e2578892f5edc545f8d8050f16b9a0a768075f29b32909f0c62", 0x99, 0xffff, 0x0, 0x1, r3}]) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000240)=""/148) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0)) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 23:41:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x800) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0xffffffc0) [ 1486.068484][T12388] binder: 12385:12388 unknown command 264790788 23:41:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x100800, &(0x7f0000000bc0)=ANY=[]) 23:41:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x32) [ 1486.285840][T12388] binder: 12385:12388 ioctl c0306201 20000080 returned -22 23:41:48 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000001c0)={{0x8, 0x59b}, 0x22}, 0x10) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0xc, 0xe165, {0x54, 0x3, 0x9, {0xfffffffffffffffc, 0x200}, {0x7, 0x1000}, @rumble={0x3, 0xacc}}, {0x51, 0x9, 0x8442, {0x14f0e344, 0xfffffffffffffffc}, {0x5, 0x2}, @period={0x5b, 0x7fffffff, 0x7fffffff, 0xffffffffffffffc1, 0x100, {0x7, 0xffff, 0x5, 0x9}, 0x3, &(0x7f0000000080)=[0x263d, 0x6, 0x5]}}}) [ 1486.644941][T12411] binder: 12385:12411 unknown command 264790788 [ 1486.674644][T12410] ref_ctr_offset mismatch. inode: 0x41ad offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) [ 1486.785425][T12411] binder: 12385:12411 ioctl c0306201 20000080 returned -22 23:41:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x0, 0x1, [0x2, 0x1, 0x2, 0xf05, 0x9, 0x3, 0x8001, 0x1]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x33) 23:41:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04630440000000000463044000000000989fc1b7c058a4fa1c5c44e36059005ddfdf90d299806beaa31688323e80a11a2bd98a2b3e"], 0x0, 0x0, 0x0}) [ 1487.234525][T12421] mkiss: ax0: crc mode is auto. 23:41:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x200, 0x80002) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xfff) 23:41:50 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe603000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x35) 23:41:50 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000840)='/dev/snd/pcmC#D#p\x00', 0xe04, 0xc0000) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="692c913b727365743d6d61636963656c616e642c696f6368617273054b08881047e75e4b1bce4d57561a10269f0e6b71a79226d2efb7b98036121a793c18b066f9dfbd87c89b7d1a74a9731f8bca2b51cc297e2a2b"]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x2, 0x2, 0x10001, 0x6, 0x1, 0xbca, 0x8, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x1, 0x6, 0x4, 0x4}}, &(0x7f0000000280)=0xb0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000400)={0x1}) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x800, 0x1, 0x18764e16, 0x5, 0x3, 0x8, 0x9, {r4, @in={{0x2, 0x4e20, @multicast1}}, 0x100000000, 0x6, 0x8001, 0x401, 0x4}}, &(0x7f0000000440)=0xb0) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0x0, 0x2}, 0x10) [ 1487.938533][T12445] mkiss: ax0: crc mode is auto. 23:41:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000180)=""/78, &(0x7f0000000200)=0x4e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10004, 0x1, 0x4, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 23:41:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x60400) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x7, {{0xa, 0x4e23, 0x100, @empty, 0x3eb}}, {{0xa, 0x4e22, 0x3ff, @ipv4={[], [], @multicast2}, 0x351bfd1e}}}, 0x108) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000280)=0x4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r2, 0x9}, &(0x7f0000000300)=0x8) [ 1488.236786][T12451] ref_ctr_offset mismatch. inode: 0x419b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x36) [ 1488.405828][T12472] mkiss: ax0: crc mode is auto. 23:41:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x0, 0x0, 0x280a840, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x200000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000180)=""/151) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="041d01dd0d0000000000004036c25600"], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1e07ec40bc2599bd) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x4, {0x7ff, 0x101, 0xffffffffffff8000, 0xfffffffffffffffc}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x1, 0x2, 0x638}, 0x1, 0x6a0}) 23:41:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x37) [ 1489.035493][T12481] mkiss: ax0: crc mode is auto. 23:41:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d634c83bbb6c6e469a76645aafd024effbe42d6274879c662244bdc99249bbc16b33351096a650903ea9f0483"]) [ 1489.217239][T12500] binder: 12499:12500 unknown command -587129596 [ 1489.223814][T12500] binder: 12499:12500 ioctl c0306201 20000080 returned -22 23:41:51 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1489.382043][T12506] mkiss: ax0: crc mode is auto. 23:41:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x38) 23:41:52 executing program 2: futex(&(0x7f0000000580), 0x7, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1489.704728][T12534] ref_ctr_offset mismatch. inode: 0x4201 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1489.766210][T12540] binder: 12499:12540 unknown command -587129596 23:41:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f636861727365743d6d616369ffff6c616e642c696f636861727365743d63"]) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x400, 0x101802) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x5b160521da445e29) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0x3}, 0x8) 23:41:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040)='em0^]procwlan0\x00', 0xffffffffffffffff}, 0x30) ptrace(0x4207, r1) [ 1490.185620][T12540] binder: 12499:12540 ioctl c0306201 20000080 returned -22 23:41:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x39) 23:41:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="58120000", @ANYRES16=r1, @ANYBLOB="040028bd7000fddbdf25020000000800020002000000080006007f000001080006000000000808000800e000000114000900000000000000000000000000000000010800040001000000080001004e220000"], 0x58}, 0x1, 0x0, 0x0, 0x3a6ed2de6e47056b}, 0x20000001) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000480)={0x1ff, 0x0, [], {0x0, @bt={0xba28, 0x5, 0x1, 0x3, 0xfffffffffffffffe, 0xaff, 0x3, 0x0, 0x100, 0x6, 0x1, 0x0, 0x80000000, 0x4, 0x5, 0x8}}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xbc}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e20, 0x8, @empty, 0x7fffffff}}, 0x400, 0x2}, &(0x7f00000003c0)=0x90) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000400)={0x0, r2, 0x2, 0x4, 0x8000, 0x5}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000200)) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000440)) 23:41:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:53 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa96e}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xbcc66c40701ecd1d}, 0x40) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x200) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000040)={0x3, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharsetaciceland,iocharset=c\x00\x00']) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) fgetxattr(r0, &(0x7f0000000200)=@known='system.advise\x00', &(0x7f00000000c0)=""/12, 0xc) 23:41:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x18db80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x2) 23:41:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x3a) [ 1491.006297][T12578] ref_ctr_offset mismatch. inode: 0x41af offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1491.020733][T12567] mkiss: ax0: crc mode is auto. [ 1491.096219][T12582] binder: BINDER_SET_CONTEXT_MGR already set [ 1491.234109][T12582] binder: 12572:12582 ioctl 40046207 0 returned -16 23:41:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x400, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x2f) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200, 0x8e0cba7eaaca9780) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x1, 0x89, &(0x7f0000000040)="f79bd7cfafbf589912e2b03cb8d93fa61e2d4733746473224552fe82e6e10d9ed40cd4ba16af83a75b6cfffaf541562c94d3c110405275d444e3d923eecd587aa33607538a8599b105d7b9b8bd413f81826b14241f7cfcb700c2cec40e85c6b7ef999009e21f69860980f4f7c208acbb2d7c75adcb3cbd8447894a6e1934b505a6af8bdc59c8335d0f"}) [ 1491.516037][T12593] mkiss: ax0: crc mode is auto. 23:41:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1491.578513][T12577] mkiss: ax1: crc mode is auto. 23:41:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x3b) 23:41:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x400) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000001c0)='vboxnet1\x00', 0x0, r0) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365749733097729763d6d00006963656c2f420e84f1fbe1b3617273aa96f07bc3d2dba18df3e4dddfa07645cb777dc72926b8fba2ecb9465a8aed7b6c6a9b00e8985289bee24278b59d80cead2f2719bb37433ca5a00a46f8f3f73403fb8738d019e632eb5155b7e51a4ea8b014773bcb584bf3d1293302b56df5eef895a4abb722e96a46ff7c09000000b6314311f4ceb177d1ec306d086c3f84a9943ddf354ba65cb6d350644bf8c4ee46ad332f9439bfbd6726437d79ea49a52584a0cdfdcafc3d8add5c"]) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'nlmon0\x00', 0x1}, 0x18) 23:41:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:41:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x22000) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0xffffffffffffffff, 0xfffffffffffffdf0) 23:41:54 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x600) syz_open_pts(r0, 0xc1dc559d69d1c497) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) 23:41:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={&(0x7f00000001c0)=@ethernet={0x1}, 0x80}, 0x40800) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffff, 0xa802) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) pipe2(&(0x7f0000000000), 0x4000) 23:41:54 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x3c) [ 1492.667183][T12652] ref_ctr_offset mismatch. inode: 0x40a4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1492.697189][T12648] mkiss: ax0: crc mode is auto. [ 1492.831986][T12657] mkiss: ax1: crc mode is auto. 23:41:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) prlimit64(r1, 0x5, &(0x7f0000000000)={0x10001, 0x1}, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x3e) 23:41:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffd35, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 23:41:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) [ 1493.194428][T12661] mkiss: ax0: crc mode is auto. 23:41:56 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:41:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x42) [ 1493.643825][T12698] mkiss: ax0: crc mode is auto. 23:41:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffffffffffc) write$9p(r0, &(0x7f0000000080)="4efc8b908f050ddcdc0ba4d1b8b90b87b1b6cb3b60c6046f66a1ac2bf00d365c9163931ac6abdecf78d6c19225c5baa0a62b2e50625311d9", 0x38) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80102, 0x0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x90, 0x2, 0x2}, 0xfcc}}, 0x18) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1494.079727][T12703] ref_ctr_offset mismatch. inode: 0x41cc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000000, 0x480) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @local}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@rand_addr="b8011560ccad7b01c524d1008f0c31ba", 0x7f, r2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:41:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x43) [ 1494.419533][T12721] mkiss: ax0: crc mode is auto. [ 1494.433818][T12738] binder: BINDER_SET_CONTEXT_MGR already set [ 1494.624287][T12738] binder: 12729:12738 ioctl 40046207 0 returned -16 23:41:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1aa27e8e947fdc97, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1) [ 1494.850263][T12748] mkiss: ax0: crc mode is auto. 23:41:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044000e0d36f4027e2a6af000000"], 0x0, 0x0, 0x0}) 23:41:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000000)=""/50, 0x32, 0x40000001, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:57 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1495.263473][T12777] mkiss: ax0: crc mode is auto. 23:41:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x46) [ 1495.388895][T12774] ref_ctr_offset mismatch. inode: 0x41cb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1495.436946][T12785] binder: 12779:12785 unknown command -1495128256 [ 1495.607791][T12785] binder: 12779:12785 ioctl c0306201 20000080 returned -22 23:41:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:41:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x204002, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x6, 0x63f, 0x8, 0x1, 0x4, 0x4, 0x7fff, 0x10000, 0xfffe000000000000, 0x2cf, 0x791, 0x68}) [ 1495.845843][T12785] binder: BINDER_SET_CONTEXT_MGR already set 23:41:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x48) [ 1496.126093][T12785] binder: 12779:12785 ioctl 40046207 0 returned -16 23:41:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:41:58 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1496.310661][T12810] mkiss: ax0: crc mode is auto. 23:41:59 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x4, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000000400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x100000000000000) 23:41:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0xfffffffffffffe01, 0x0, 0x820c, 0x3, 0x7ff, 0x6, 0x9, 0x80000001, r2}, &(0x7f00000001c0)=0x20) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r3}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'eql\x00', 0x3}, 0x18) [ 1496.794891][T12831] ref_ctr_offset mismatch. inode: 0x41dd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:41:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x49) [ 1496.931867][T12833] mkiss: ax0: crc mode is auto. 23:41:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 1497.077409][T12846] binder: 12838:12846 ioctl 89e2 20000040 returned -22 23:41:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bind$isdn_base(r1, &(0x7f00000000c0)={0x22, 0x4, 0x7d8, 0x8, 0x8}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d6383c3e517aaae79a2341b553d47e5c6d42788dfac5d0ed1d7f0ec14d4040004a4c25717b3ffed5a13837f050b345b18c4ca8a064bc688ce3ae26916224c81e8f920ba2aa7f07d135515072db13a995d5fd061335e76d740c969"]) [ 1497.248033][T12839] mkiss: ax0: crc mode is auto. [ 1497.335686][T12846] binder: 12838:12846 ioctl 89e2 20000040 returned -22 23:42:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x4a) 23:42:00 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1497.695778][T12868] mkiss: ax0: crc mode is auto. 23:42:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x1, 0xaec9, 0x92fb, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:42:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40201, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap='mmap'}, {@noextend='noextend'}, {@msize={'msize', 0x3d, 0x80000001}}], [{@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@hash='hash'}, {@subj_role={'subj_role', 0x3d, 'em0+vmnet0posix_acl_access*lobdev^'}}, {@uid_lt={'uid<', r2}}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@hash='hash'}]}}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=mactcelancharset=c\x00\x00\x00\x00']) 23:42:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x4b) [ 1498.280021][T12893] mkiss: ax0: crc mode is auto. [ 1498.302589][T12897] ref_ctr_offset mismatch. inode: 0x41d7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0xa, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000180)=""/76) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400200, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xca, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x10, 0x6, 0x9, 0x19, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_key={0x15, 0x9, 0x4e0, 0x0, "8af176954a53d98bc00abbac42ca0e3a53f1d967d2d282eda07ec4ed1705342af77b7b26e64f1338574ca728966bd7da15952529022ec0598e616423034166d2c5f252c8b595ec58456fb81d43f626efc605bb19a70ce6d2ed2dfbe1d12623e060dd5000a19c60ed4afb86891e0d3274c6c8b4b53072441259c39f16454a135b1f11de36fe92c9aafd79e641fd1ca6cea8758132faea5240d0efba4b"}]}, 0xc8}}, 0x8000) 23:42:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1498.731235][T12894] ref_ctr_offset mismatch. inode: 0x41d7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1498.790663][T12893] mkiss: ax0: crc mode is auto. 23:42:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) prctl$PR_SET_FP_MODE(0x2d, 0x1) 23:42:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x4c) 23:42:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) openat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) r2 = getpgrp(0x0) ptrace$getregset(0x4204, r2, 0x207, &(0x7f0000000180)={&(0x7f0000000200)=""/105, 0x10f}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:42:02 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000300)) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f00000001c0)={0xa91, 0x6, 0x7, 0x260bd8ec, 0x1, 0x7ff, 0xffffffff, 0x7f, 0x4, 0x565, 0x50, 0x0, 0x3bcf, 0x10001, &(0x7f0000000040)=""/187, 0xfffffffffffffffe, 0xa6, 0x8c5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000440)=[@release={0x40046306, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x5, 0x0, 0x2f}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/74, 0x4a, 0x2, 0x26}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @enter_looper, @increfs], 0x12, 0x0, &(0x7f00000002c0)="8f4a461ef271e94bb3686967e9711fa03eb5"}) 23:42:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1500.068548][T12971] ref_ctr_offset mismatch. inode: 0x41c9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x4d) 23:42:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1500.421495][T12977] mkiss: ax0: crc mode is auto. [ 1500.601487][T12985] mkiss: ax1: crc mode is auto. 23:42:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) pipe2(&(0x7f0000000000), 0x4000) [ 1500.670722][T12971] ref_ctr_offset mismatch. inode: 0x41c9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x4e) [ 1500.927123][T13002] binder: BINDER_SET_CONTEXT_MGR already set [ 1500.959898][T12980] mkiss: ax0: crc mode is auto. [ 1501.103574][T13002] binder: 12993:13002 ioctl 40046207 0 returned -16 23:42:03 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 23:42:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0x7f) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x81, 0x10100) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x3, r2}) 23:42:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) exit_group(0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x5, 0x5, 0xfffffffffffffffc, 0x8000}, {0x7fff, 0x100000001, 0xfffffffffffffff8, 0x1}, {0x9, 0x5, 0x2dfe, 0xfd57}, {0x2, 0x1ff, 0x3135, 0xfffffffffffffffa}, {0x9, 0x8000, 0x3, 0x6}]}) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 23:42:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0xff, 0x7, 0x340f13b6, 0x15, 0x10800000000, 0x0, 0x5, 0xe7, 0x9, 0xfffffffffffff7ac, 0xfffffffffffffffd}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20000020) [ 1501.856129][T13037] ref_ctr_offset mismatch. inode: 0x41ca offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1502.220948][T13046] mkiss: ax0: crc mode is auto. 23:42:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0xc94d, 0x8}) prctl$PR_SVE_GET_VL(0x33, 0x15ac3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e692c696f636861727365743d631daa56f623b164ed4990e6ea735f0644995273761f"]) 23:42:05 executing program 2: getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xa71, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r0, 0x6, 0x5}, &(0x7f0000000180)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000040)) 23:42:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x68fb}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x791d47ec403d3b9e}, 0xd0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xff8e, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x5e, @broadcast, 0x4e24, 0x0, 'nq\x00', 0xd, 0x6d, 0x4f}, 0x2c) [ 1502.436050][T13033] ref_ctr_offset mismatch. inode: 0x41ca offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) fchdir(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x8001, 0x7fff, 0x426faa5, 0x7fff}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x78, 0xfffffffffffffe00, 0x0, 0x3, 0x81, 0x6, 0x52]}, 0xb) 23:42:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000002c0)={0x7}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) r2 = dup3(r0, r0, 0x0) unshare(0x40000000) r3 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) clone(0x2000, &(0x7f00000006c0)="b977c583d6a373ece2765bd5820fc9e12c27bf232c6485de136aea6514f728d3ad750323dd78937b82715d387926d8059563523bddfc2c345ca5058cf1edd96502132353b9da3e5c67e65f797aa6240a0368dbcf3fec25327bced210a68da273fb3f7b51371d2da9081388ca7162c6fd2249066addeda7706bae1a0b0e01b27a629338a163876dcd7f5553bce0f295b033f3f1026ecf60a6014bf10f63f22a2aed1815603ba4", &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="eee9597e6ba3ecee3defa3ccc7c49d47f0b5e966647732556c5d1d7fcc215c05") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'dummy0\x00', 0x2}) sendmsg$rds(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/255, 0xff}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x5, &(0x7f0000000600)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x5}], 0x18, 0x20000000}, 0x800) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000680)) write$binfmt_elf64(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x3d7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) quotactl(0x6, &(0x7f0000000840)='./file0\x00', r4, &(0x7f0000000940)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000100)=""/29, &(0x7f0000000140)=0x1d) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000880)=0x10) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000040)=0xffffffc0) [ 1503.027885][T13079] binder: 13067:13079 unknown command 536871168 [ 1503.208139][T13070] mkiss: ax0: crc mode is auto. [ 1503.230193][T13082] IPVS: ftp: loaded support on port[0] = 21 [ 1503.274723][T13079] binder: 13067:13079 ioctl c0306201 20000040 returned -22 23:42:05 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x4) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x401000000000, 0x400001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1ff) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f636861727365c88ec7444923ef690ad4c2103236743d6d61636963656c07"]) [ 1503.480912][T13079] binder: 13067:13079 unknown command 536871168 23:42:06 executing program 0: r0 = socket$inet6(0xa, 0x5, 0xa60) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x13}, 0x0, 0x3, 0x0, 0x4, 0xe52, 0x7}, &(0x7f0000000100)=0x20) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000400)={0x7, 0x4d, 0x2}, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) getsockname$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x1000, {{0xa, 0x4e24, 0x7, @mcast1, 0x9}}}, 0x88) r2 = msgget(0x0, 0x1) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000440)=""/188) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000140)={0x0, 0x5, 0x8001, 0x8}) getpeername$unix(r3, &(0x7f00000006c0), &(0x7f0000000180)=0x34a) [ 1503.668142][T13079] binder: 13067:13079 ioctl c0306201 20000040 returned -22 23:42:06 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000100)={{0x3f, 0xefd, 0x5, 0x9, 0xffffffffffffffd3, 0x1}, 0x3, 0x3, 0x2, 0xcb, 0xc, "d1f238e73ed04d83125c6d97e167f54dbcf563b50ac8b6aa5d862abfe899ce6d2661386bbfa5a0f34fdc4ec9b40bd4fb6f3e4d4e8235553b3fa2f4ad506e7ab8a635f9f61f38bafc46267124c6dc7266011ae98d34ad9a2bfa65a2997ee4723a822838c11f0f127fa62e9b532c730996ff81e5a489518bc5aa879791c45ae5f6"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) 23:42:06 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x103002, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x15) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, r3, 0x3}, 0xc) 23:42:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0x44a18fae70a62b43) r4 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000800)=0xe8) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='.\x00', 0x0, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000080)="0a7c68776e594bc70194dd436db841365c0b630ecc83e9ba19ecfa697f553c90e84c0f8829f7215f47957f35479c214014d2a2bb96826a83e4c21e86bc966b9ce107a9", 0x43, 0x3}, {&(0x7f0000000100)="8bb2d7b405a9f2d9115f8fb6bc79e50877", 0x11, 0x10000}, {&(0x7f00000001c0)="b8fc7e6642047560d4ec944ccae912ea6e7148f2f930c27ab0f4ac1a9a816d74cbecbf6ff313b6058d41e7923115da75384a04b3043a55010e33940ce9587dbd5d88f0fd25d15af2ec1655c1ee05b95f379fa8bea246f3945115c7418ee5a1d5df141402255de732836553a4df126d86d3fa9d97764034cbdf8d69aab3375da810e6c69e62231908", 0x88}, {&(0x7f0000000280)="19028d3f3ef43c5c044fecff64aa5144967e6df8ee879af41ddd5095c6d823e9bea2954db5b22aaac40207b634597834c14aa4a9ad4f1c9429816f9db3185e9ab941687e39066880fa058ba7fe43c15cd5377ed2469f407014863975d633efc6b2cd851fa5d2d9fe050e848aff77882c026773a28632b293dd54281ecfb66391e3d598af1a821412fd28b2f620df369cd25e9183e05075b93864978df988b20e1e60360688a6f7581fc1866f668d1724f6af2b52dcc91534fb605057ee831465dfa4cf1be7c4f325f3b46473bc41041a3213dfa05db59b671a905835", 0xdc, 0x401}, {&(0x7f00000003c0)="f629004162eb4f6483a7cf8527ab3d7833fa846d1632397b7ca6ccff4fd07224334c3e97321d6d7daed7fdf9aedb6d097d1ae293b3f342b5b59e974726edc2d656257143b6c56999bdcc3cbbde4d1431dea7b7da85d1b13ffa988b15135c79d6738e3fce5e4059503867134d7907c0e3983e7f2e6566c39b386a8aa099aee6a941383ed55890b5de4da148117acf19fde93f91403c6b8fed0e440b15bd81609defb207cf6d3c742d58e05ab2431c2d2e50c9b1343d3c8598dc76b806564354a1670c0c24d5459e366367ce89936248923b7d", 0xd2, 0x7ff}, {&(0x7f00000004c0)="e0709533ca8d9324513ee15711773c11e346e6d4904799dfba3f7e4d86a6af7563240d0f63d8669013352bdaa3b3a8b03e12acb99cd8846be8d493002adabcf2d3382be59379422d187aff8bb638d92fbcfd74a1cd1620629459212226dde577a5b85121609dcf30aad541d8e48a94b3ab494b4aaa08da8ac5e796d8d71f90c7da53558e49fcbe35208439090ee80a7e51b3758093de1805a09eb2dc0d1c148115dab845b51ff443ce1b64cb6dec7d01080d929c6e4435561c26ee578d023660eba7c784cb2793049347f3a0e966", 0xce, 0x2}], 0x410, &(0x7f0000000980)={[{@file_umask={'file_umask', 0x3d, 0x5}}, {@gid={'gid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}, {@creator={'creator', 0x3d, "d820925d"}}, {@file_umask={'file_umask', 0x3d, 0x400}}, {@part={'part', 0x3d, 0x1ff}}], [{@euid_lt={'euid<', r4}}, {@obj_user={'obj_user', 0x3d, 'hfs\x00'}}, {@uid_gt={'uid>', r5}}, {@euid_lt={'euid<', r6}}, {@euid_gt={'euid>', r7}}, {@euid_gt={'euid>', r8}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'md5sum'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1504.240132][T13107] ref_ctr_offset mismatch. inode: 0x41fd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr="6747e433cc85d0c17f2f17bc38a0d953", 0x800, 0x0, 0xff, 0x101, 0x0, 0x400000}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:42:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\b'], 0x0, 0x0, 0x0}) 23:42:07 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x3, r1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x1a) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x800000000018) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000180)={0x8f, 0x1, 0xffffffff}) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000001c0)={0x3, 0x5}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0x1}) 23:42:07 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:07 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x8000000000000009) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1505.179031][T13139] binder: 13138:13139 unknown command 8 [ 1505.377065][T13139] binder: 13138:13139 ioctl c0306201 20000080 returned -22 [ 1505.377847][T13150] ref_ctr_offset mismatch. inode: 0x41c7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1505.502292][T13142] binder: 13138:13142 unknown command 8 [ 1505.599206][T13142] binder: 13138:13142 ioctl c0306201 20000080 returned -22 [ 1505.786423][T13094] IPVS: ftp: loaded support on port[0] = 21 23:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x6f871c905f55dbdb, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xa78, 0x8ad4, 0x5}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/49) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100)) 23:42:09 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000bc0)=ANY=[]) 23:42:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xe3, 0x141040) getsockname$tipc(r1, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) 23:42:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x4b) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000200)=0x2) fanotify_mark(r1, 0x4, 0x2, r1, &(0x7f0000000240)='./file0\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1507.067516][T13178] mkiss: ax0: crc mode is auto. 23:42:09 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="4c4962ddd5d5001df40407000100f9ff"], &(0x7f0000000100)=0x10) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) fstatfs(r0, &(0x7f0000000140)=""/62) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) [ 1507.189134][T13189] ref_ctr_offset mismatch. inode: 0x4214 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c697f000000000000003d63"]) 23:42:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x20000000800, 0x0, 0x0, 0x1, 0x10000}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x100}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x0, 0x5}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1507.383844][T13178] mkiss: ax1: crc mode is auto. [ 1507.391026][T13193] mkiss: ax0: crc mode is auto. 23:42:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x7, 0x5f1, 0x4, 0x5, 0x100}) 23:42:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = io_uring_setup(0x824, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x221}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304bfa26cb6dafbd53f4362fa4000"], 0x0, 0x0, 0x0}) 23:42:10 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:42:10 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'yam0\x00', 0x7ad7820bad19438c}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0xe89e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, 0x0, 0x4, 0x0, "dbf1497e930f579bbdf2145d298ceb31f4b1807253140cd6e16e1b815ab59c3c1d68e897cd44aa6fcb3f486fc89b43eb9ad7defbed55fc4fad980dbb1930a0daf6583fbf6575aea071ce3fb003a47a41"}, 0xd8) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xf1, 0x80) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000001c0)={0x18, 0x1, 0x0, {0x6861}}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="521c54865ca79586b484bd062bb4b79b041288b16ae39fab73c46a52bbc53e4934852c1369975398cf88c51ee75726d1735ceaf3bd57ad7296bd40ff6a32054f66799fb22a33ae142832ce40a2db433b7f1394967904", 0x56}, {&(0x7f00000000c0)}], 0x2}, 0x20000001) [ 1508.571918][T13266] binder: 13256:13266 unknown command -1090231548 [ 1508.614886][T13260] mkiss: ax0: crc mode is auto. 23:42:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) r1 = syz_open_pts(0xffffffffffffffff, 0x101100) ioctl$KDSETMODE(r1, 0x4b3a, 0x7) [ 1508.664881][T13266] binder: 13256:13266 ioctl c0306201 20000080 returned -22 [ 1508.678534][T13253] mkiss: ax1: crc mode is auto. 23:42:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x3005aa, &(0x7f0000000000)={@local, @empty, [], {@arp={0x8906, @ether_ipv4={0x2, 0x800, 0x6, 0x4, 0x0, @local, @local, @dev, @local}}}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000000d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="e8e94d4f64e6d172a9c931ad88ffd590", 0x1f, 0x2, 0x0, 0x3, 0x7f, 0x7}, &(0x7f0000000080)=0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x2, 0x3}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1508.897000][T13283] binder: 13256:13283 unknown command -1090231548 [ 1508.936328][T13276] ref_ctr_offset mismatch. inode: 0x420f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1508.938137][T13283] binder: 13256:13283 ioctl c0306201 20000080 returned -22 23:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x18) 23:42:11 executing program 1: lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x7, "946b28b0f15afd79c02571"}, 0xd, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_pts(0xffffffffffffffff, 0x200082) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x101000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x100000001}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000100)=0x30) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpgid(r2) 23:42:12 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x1, 0x5}) r1 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:42:12 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1509.714500][T13308] mkiss: ax0: crc mode is auto. [ 1509.756033][T13312] mkiss: ax1: crc mode is auto. 23:42:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) socket$nl_netfilter(0x10, 0x3, 0xc) 23:42:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) [ 1510.039720][T13312] mkiss: ax0: crc mode is auto. 23:42:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x7f, 0x1, 0x3}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x401}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800}, 0x20) 23:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x20000000000d) [ 1510.417127][T13365] binder: 13357:13365 unknown command 0 23:42:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1510.493588][T13365] binder: 13357:13365 ioctl c0306201 20000080 returned -22 23:42:13 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000000) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) init_module(&(0x7f0000000040)='bdev,ppp0posix_acl_accesseth0\x00', 0x1e, &(0x7f0000000080)='\\`@\x00') syslog(0xa, 0x0, 0x3643c5ab910ade5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) r1 = socket(0x8, 0xa, 0x945) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) [ 1510.653074][T13378] binder: 13357:13378 unknown command 0 [ 1510.800427][T13378] binder: 13357:13378 ioctl c0306201 20000080 returned -22 23:42:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) 23:42:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffe00, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)}}, @acquire_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/11, 0x0, 0x0, 0x2f}, @fda={0x66646185, 0x8, 0x0, 0xa}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000000340)}, 0x1000}], 0xfffffffffffffff4, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23:42:13 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180)=0x100, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) write$nbd(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="67446698000000000200010001000000b80e5e0243d3b1c0156e3f6d5b6222adb386d254082639d5850c483de84ab6fd2c402ad3b0a80985d9b6aeb8bbaf5239c49f641300000000"], 0x48) [ 1511.044454][T13387] ref_ctr_offset mismatch. inode: 0x4248 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x220040, 0x26) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1511.188018][T13394] mkiss: ax0: crc mode is auto. [ 1511.317186][T13386] ref_ctr_offset mismatch. inode: 0x4248 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1511.385554][T13403] binder: 13402:13403 ioctl c0306201 20000440 returned -14 [ 1511.422076][T13401] mkiss: ax0: crc mode is auto. 23:42:14 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2200000000f800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0x800) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x7}}, 0x30) renameat(r2, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0xffffffc0) [ 1511.536170][T13413] binder: 13402:13413 ioctl c0306201 20000440 returned -14 23:42:14 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x65b) fcntl$addseals(r0, 0x409, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@ipv4={[], [], @loopback}, 0x800, 0x0, 0xff, 0x3, 0x0, 0x200}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:42:14 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1511.891936][T13412] mkiss: ax0: crc mode is auto. 23:42:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04430440000000000463044000000000"], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) [ 1512.186571][T13436] mkiss: ax0: crc mode is auto. 23:42:14 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x90000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000080)={0x0, {0x77359400}, 0x2, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) 23:42:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) r1 = accept(r0, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000000c0)={@bcast, @default}) 23:42:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) tgkill(r1, r1, 0x1c) getpgid(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x105000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) [ 1512.392605][T13455] ref_ctr_offset mismatch. inode: 0x4248 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1512.539190][T13468] binder: 13462:13468 unknown command 1074021124 [ 1512.694753][T13468] binder: 13462:13468 ioctl c0306201 20000080 returned -22 23:42:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="c7d722dc10e0c61fa353103223bbc4a5be42456a7bc1eeb2fbea3f919bb630dec3e57a1ba0c5ed54248ac673c7a4bb7cc5a70fa94813639ce14b6f75629e11fa2b1f11445dd88e7155c94af046405b33c2c51e7756df6ce2840c9de33a27141524d8f4bb0431558988af1cf53eb0429887203c702a73da60b71bd0c3be4f9fac459a48b78c9542095e1cad72d1c715e44040aa4ff22bee7a3870c10227f1b9b78e7578c35d97f8575227249954a9b9bea88814f5afc7a4ee3ef4d2bcec361fd02f1b2733d52a5c3fb97413e0b36c7304b643c4597fab5887137e06") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1d0, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3be0000000000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x86e600000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x72}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd37}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x76}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4dce2805}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5267}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbeee}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000}, 0x4044004) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x33a489c0}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) [ 1512.816551][T13476] binder: 13462:13476 unknown command 1074021124 [ 1512.861499][T13476] binder: 13462:13476 ioctl c0306201 20000080 returned -22 [ 1512.872168][T13473] mkiss: ax0: crc mode is auto. 23:42:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x2, 0x2, 0xff, 0x2}, 0x20) 23:42:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x5) dup2(r0, r0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @empty, 0x0}, &(0x7f0000000040)=0x151) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'tunl0\x00', r3}) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:15 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x90000, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x4011108) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xe25, @null, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) [ 1513.397894][T13490] mkiss: ax0: crc mode is auto. [ 1513.519738][T13480] mkiss: ax1: crc mode is auto. 23:42:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x101000) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x3, 0x4, 0x8, 0x5, 0x2, 0x8}) 23:42:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) 23:42:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_WIE_ON(r2, 0x700f) dup(r0) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xc2100, 0x0) 23:42:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x600}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046304, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0xfffffffffffffffd}}, 0x30) 23:42:16 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1514.524936][T13545] mkiss: ax0: crc mode is auto. [ 1514.553253][T13558] mkiss: ax1: crc mode is auto. 23:42:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x100000001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, &(0x7f0000000180)=0x4) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x59aa, 0x200) 23:42:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:17 executing program 4: r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="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"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x10, &(0x7f0000000100), 0xc}], 0x492492492492642, 0x0) 23:42:17 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x0, 0xff, 0x1, 0x0, 0xfffffffffffffffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:42:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x900, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0xffffffc0) 23:42:18 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) accept4(r0, &(0x7f00000009c0)=@nl=@unspec, &(0x7f0000000a40)=0x80, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d63ae69b750eaac4c2b803e91814e79e8092b989d16e696bb109fd7618947774df352b079f3bccfafcf653228e7a639697b57fd1c308a904ba6a7638dac61c76baca778a668fcf0b55ce2b7df2d6dcb7a8e1e64ef8efa699213929d545366b5f2e9f6bae660dd995d3a1df67f86a263e330d5c744cd70b83c9b10b2c94851"]) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x12c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000b8050000a8030000a8030000000000001001000000000000e8040000e8040000e8040000e8040000e804000005000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000066000000f7ff00"/80], @ANYBLOB="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"], 0x618) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/mls\x00', 0x0, 0x0) r4 = getgid() lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r5) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000080)={0xc5b4, 0x96b14efe53baa624, 0x4, 0x200000, {}, {0xa7d6f95e4395966, 0x0, 0x9, 0xffffffffffff8001, 0xffffffffffffffff, 0x5, "793fa3d3"}, 0x7fffffff, 0x2, @planes=&(0x7f0000000040)={0x5, 0xdc, @mem_offset=0x2c7, 0x96}, 0x4}) socket$inet6(0xa, 0x5, 0x9) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) [ 1515.578914][T13600] ref_ctr_offset mismatch. inode: 0x4094 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:18 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xf9, 0x200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {r1, r2/1000+10000}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYRESDEC], 0x100be) fallocate(r1, 0x3, 0x0, 0x7fff) [ 1515.914701][T13605] mkiss: ax0: crc mode is auto. 23:42:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2, 0x8, 0x80000, 0x443}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1516.257268][T13616] mkiss: ax0: crc mode is auto. [ 1516.315283][T13600] ref_ctr_offset mismatch. inode: 0x4094 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={r2, 0xe7a3, 0x3ff, 0x1f, 0x80000000, 0xffffffffe604f20b, 0x7}) 23:42:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x440, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x3e, "f8300dd133386e9c164ee582d79808fd5f6b2cbb955f06b08a092ff69990f559e4c52907537979fb8a26b4551da0f8da5d49418febe81dad901d2a7e577c"}, &(0x7f00000001c0)=0x46) getpeername$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r2, 0x4, 0x5}, 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000300)={0x2, 0x2, 0x7, 0x0, 0x4}) accept$inet(r3, 0x0, &(0x7f0000000080)) 23:42:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x375d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$caif(r1, &(0x7f0000000180)=@dgm={0x25, 0x100000001, 0xd652}, 0x18) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0x80000001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x14800, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000080)={0x2, "37615e9f03d48a71e13d6808ea90f81f6316796293da1ce7323e95c5dbc923d4", 0x1, 0x1}) 23:42:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x2}}, 0x18) fsetxattr$security_ima(r0, &(0x7f0000000180)='security.ima\x00', 0x0, 0x0, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7}, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0xc020660b, &(0x7f0000000000)) [ 1517.023131][T13652] mkiss: ax0: crc mode is auto. 23:42:19 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl(r0, 0x100000001, &(0x7f0000000000)="b95b4ffe5e7a650cfbc4aa81e2f2d6defdc821d40d73e3ecffc8270060bd4cfa1e24e6ba3004abd4afa6f6b1077c7738a4ba49a1f74a96de628e60ef710740228868232d312a09282f965c9dce0b2c216e09392e94dfb511e06da2a64a3d9979f42043de1756e8e9b7e82079b77bdc94733867ca38fd6ca86a") syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) [ 1517.178431][T13666] QAT: Invalid ioctl 23:42:19 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 23:42:20 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)=0x100000001) r1 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:42:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x8, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:20 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 23:42:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x5acf889043effd56, 0x0) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f636861727365743d6d61636940656c616e642c696f76e861727365743d63"]) [ 1517.990362][T13652] mkiss: ax0: crc mode is auto. 23:42:20 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1518.108049][T13653] QAT: Invalid ioctl 23:42:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x3, 0x9a42, 0x400}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r1, 0xfa, "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"}, &(0x7f00000000c0)=0x102) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x100000000, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000002c0)={0x9, 0x200, 0x1, 'queue1\x00', 0x12}) [ 1518.311096][T13698] mkiss: ax1: crc mode is auto. 23:42:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2081, 0x80) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) 23:42:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40) ftruncate(r0, 0x17) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f00000001c0)=0x6e) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727365743d5b616369c9876c616e642c05949a4bbd1f7998000000e7ff0000743d63"]) [ 1518.624678][T13717] ref_ctr_offset mismatch. inode: 0x4172 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1518.900859][T13703] mkiss: ax0: crc mode is auto. 23:42:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x1, @broadcast}, 0x4, {0x2, 0x4e21, @multicast1}, 'gre0\x00'}) 23:42:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000380)="41644944887c52cc531bb0cc54bc109c28cc7034283a7a4c4fc5ea438534881a8fc65840cb0a0e2da4a508baf5eab10b6bb79cfffcd86f303c932e11563571857c34aee12438c7594d8d91deda73897f35fce3402491fae63d8b9ad8c6c1a8535a3939f1d46ecdee80d33be9f70cf2b0c2db2dcc6ab62e90b69b7b26247e573da1a0dac0ff91f6705ad8ad2e85728dbc94002fac8a02d91ded4c67f08e2ce55f0ac738d8f34cd135c4bc560bc77faf3a2b29e9b703425499286fd3fdfc7dff381c4a7584ee42bb5eaa679d70d618c36ba1d22905115aeba30336ba1fd9ef8a4e6c8713803a848bbc9cde5f4bdc", 0xed, 0x40004, 0x0, 0x0) close(r0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000000)={'vlan0\x00', 0x10001}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$void(r2, 0xc0045878) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000540)) socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x1a9, {{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x17}, 0x200}}, {{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0xa}, 0x3}}}, 0x108) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000580)=0x2, 0x4) ioctl(r3, 0x5, &(0x7f0000000140)="0adc7f70d86d0180000000cdafd0223ee867a10583e61b6d15ede3b195fe788c4915208af29eb24974acb225c5f77ca11ab99a3de323bfc1ff07f94b9405c676f7db124a893dda5453a9a652ede43fcfe1fceebcd2ad9094efc3137f0651b2a589208fab4a150322789a33843c0bbbcf069be238dd03e25375783e06de8502b429aabee94c468ae2d21080ee11d36bd58c6adc8641a8a42eb45136d692dd936cebaa95b023c204e34e9d75ea444bc8fa9ed5c0d0ab3dc556ab05a18a03991f0d52d7c65320fb3a9437bdd9f94913344baa64178be783d09b7045b363b8e30000000000000000") shutdown(r4, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) accept$alg(r2, 0x0, 0x0) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x1, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x100000000000) socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000000080)=0x80000001, 0x4) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000040)=0xfa) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'caif0\x00', {0x2, 0x4e21, @empty}}) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000480)="bfa27ba4b7e0ce8a08da1634cae08469cbe3ad761bcb8af1e743b05a03830007028ad8a1a665bcdee226e2a9a9bf481122c7d00b5c30de7de053b765f28a94f6e68c408d744c8647f1ddc11e680c6082f2da1dd1309956e0fd615cdfe7a50168e32d80d83af3a0ee3ff504672801ce6e39215e", 0x73) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000005c0)={'syzkaller0\x00', {0x2, 0x4e20, @multicast1}}) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000500)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xcd, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x5ad}, 0x5c) [ 1519.216864][T13743] mkiss: ax0: crc mode is auto. 23:42:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:22 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1519.582450][T13743] mkiss: ax0: crc mode is auto. 23:42:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = dup(r0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x5ec) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="82b078634f5f11ea97054df3729cb4751cda900a597740f063daf22cd264fa321ca1dd4cc50ee3809be7385682b90d77248929b9cece4fc7938bfb6f486abe28199a268cf2540eb9ab72584abe1b06dd6aed172bbcc12cfbfa7e4e5ec804ea7e79ad0f7ac2c9cb2a5c943a003164518432ac4ec8f4586d5d56b484fb2372d1f2a8edea98afdcf63fcf4be56d038ea714fd3b609eb88c210f0ee9831916fda5c7751e375a1e3017e67872951dcd679a402171144e755456593f981ee81b31811ffbb37b99a3ddc0169375c773e2396fac29fb23c59c86954d623253272be6ff1f2f9288aa0ca15b9d763e0960715a") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1520.006296][T13787] ref_ctr_offset mismatch. inode: 0x4172 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1520.166770][T13799] QAT: Invalid ioctl 23:42:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x9}, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x6) fstat(r2, &(0x7f0000000040)) ioctl$KDENABIO(r2, 0x4b36) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 23:42:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x4, 0x4) 23:42:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xb3, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:23 executing program 4: gettid() r0 = syz_open_dev$usb(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000540)='asymmetric\x00', 0x0, 0x0, 0xfffffffffffffffc) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @empty}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xe8) r3 = getegid() mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000700)='fuseblk\x00', 0x0, &(0x7f00000009c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x7fffffff}}, {@allow_other='allow_other'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_measure='dont_measure'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner'}}]}}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd84}, 0x800000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x3, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x80, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x7, @remote}, @in6={0xa, 0x0, 0x5, @ipv4={[], [], @multicast2}, 0x4d}, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x9}, 0x3}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000680)=0x10) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc0000000000000000000", 0x4b}], 0x1}, 0x0) syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x1, 0x8100) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x1, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) 23:42:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x9, 0x81363853371635b1) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x7fffffff, 0x4) 23:42:23 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) pwrite64(r1, &(0x7f0000000000)="7870951fc60c1f782bb7f635a5ed075d4e58de8f00a961c1d7f395da55370479305cfec8cec5ba763e479d9f2d92c2439f6b2f9fd8a265944d", 0x39, 0x0) [ 1521.077928][T13823] mkiss: ax0: crc mode is auto. 23:42:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x13) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x2, &(0x7f0000000100)={[{@metacopy_on='metacopy=on'}, {@nfs_export_on='nfs_export=on'}, {@workdir={'workdir', 0x3d, './file0'}}, {@default_permissions='default_permissions'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}], [{@smackfsfloor={'smackfsfloor'}}]}) 23:42:23 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:42:23 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:24 executing program 0: r0 = socket$inet6(0xa, 0x80000, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x101, 0x8, 0xfffffffffffff000, 0x1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:42:24 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x16, 0x81, 0x9, 0xffffffff00000000, 0x2844572bdbb11dc6, 0x1, 0xb81, [], r0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x10000000000, 0x7, 0xd1d, 0x80, r1, 0xffff, [], 0x0, r3, 0x2, 0x1}, 0x3c) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x5) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000580)=""/108, &(0x7f0000000600)=0x6c) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)) setsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000400)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000002c0)) 23:42:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000780)={0x5, 0x3, 0x401, 0x8, 0x2, 0x5}) r3 = getpgrp(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000007c0)={0x8, 0x2, 0x8, 0x81, 0x4, 0x3f}) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000080)="0ecc5cdbcc036285664e34d7e22541d82ba7f86d40b36c9cb1666374cb1449a9134adb698d391bd4216bb6575e7207bfb6379e730864178bc129686bdc1f038675275b647833015b24e94cad86691ec2660d5b89ff214cfad05f72617dfe28adf0b1d4d5e2cc7fbce9d1b19b7f9844ece56c3bd13c7cc3e1d909df1d1e65ee96a5184659fff0f999debb79fb6c248b846897", 0x92}, {&(0x7f00000001c0)="04bfbda9b98ea0a5c0654b23de2898075b2e4016db03fda16b6bcd85a2e8e39b716f917b93a8da6336798a3e202ba5688e2a66b22965a95833f163f2c7febfdab64b588faa156f84e4bdbc82d57f5e2962b37c6c1b39619d797c19c4b1f4dab85fb99f8b5d5e4256f8bfbbe36eccee084ccf35cbb5f2cab4", 0x78}, {&(0x7f0000000240)="c338d5840a6360ff54717a5646eb5e6f6d0b5c0a4ead5512e6eeffdc69ec5827c16a32c420755a948b9c474bca97d9d1f8b3a347deb4b36c365f62e71452eb34a4aa0e6e3df5a080d375910cdb414b013999c44236903c77c89c862cb05a097947042a6916e2f1332364f7affb8b273f9d9ea676002c2119ce8551a21e5c0138c920f41fed0cbf881246228f90077f49a3e22f29f079cde129b73fa514449e0e9c962f67f1ed7ee698335b1975f1afe18d26338374f3d7b29b0c251e8191cf8401b653c8cf54", 0xc6}, {&(0x7f00000003c0)="c6ab290ab290a006d00b466048f0c4c824c9dc7ba35ce974780a254c31bf01d54aaa390bff3a540c598b4912bcd8e9fb89262c07106efd02810efa80cb8f6fa1fb54ca6d1928c85e7617c725e210183ee5f797f22e60c00cdf35f696cab9b3ff4d6d5373c77f0570c772eb870ef93c7a944e85c2e483fc06085961b6240f611dde8b8e3fade4fa000086db72a07b06ce084c73311c1976a8320605f5a3", 0x9d}, {&(0x7f0000000340)}, {&(0x7f0000000480)="41f9041dc3226db7a331b6129edabc5621024add763c11afdb18b8e34237f02ec222e2766024856d52ef67e4715ef3a8f9afc9e657fe6b2f4a3d739e409b18bda33df18fc0716b113470a968b749cfdab2ba", 0x52}, {&(0x7f0000000500)="c8f76fff38d4b0bb7b2943837027759d471052b8c8ed001a17c2174d9636f93794bb834a1f06997d57c46e9de1ef80c89c1012817a71d6ddd9484ba576cdc0f6f43c27bb814e547da3648a63809b", 0x4e}], 0x7, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x58, 0x40001}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceiocharset=c\x00\x00\x00\x00\x00']) [ 1521.925640][T13860] mkiss: ax0: crc mode is auto. [ 1522.000986][T13856] FAULT_INJECTION: forcing a failure. [ 1522.000986][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.266654][T13877] ref_ctr_offset mismatch. inode: 0x423a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1522.311748][T13856] CPU: 1 PID: 13856 Comm: syz-executor.4 Not tainted 5.3.0-rc6+ #122 [ 1522.319853][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.329917][T13856] Call Trace: [ 1522.333328][T13856] dump_stack+0x172/0x1f0 [ 1522.337679][T13856] should_fail.cold+0xa/0x15 [ 1522.342308][T13856] ? fault_create_debugfs_attr+0x180/0x180 [ 1522.348138][T13856] ? lock_downgrade+0x920/0x920 [ 1522.353094][T13856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1522.359357][T13856] ? debug_smp_processor_id+0x3c/0x214 [ 1522.364833][T13856] ? ___might_sleep+0x163/0x280 [ 1522.369703][T13856] __should_failslab+0x121/0x190 [ 1522.374692][T13856] should_failslab+0x9/0x14 [ 1522.379219][T13856] __kmalloc+0x2e0/0x770 [ 1522.383479][T13856] ? mark_held_locks+0xf0/0xf0 [ 1522.388284][T13856] ? _parse_integer+0x190/0x190 [ 1522.393157][T13856] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1522.398895][T13856] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1522.404546][T13856] ? tomoyo_path_number_perm+0x193/0x520 [ 1522.410200][T13856] tomoyo_path_number_perm+0x1dd/0x520 [ 1522.415692][T13856] ? tomoyo_path_number_perm+0x193/0x520 [ 1522.421344][T13856] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1522.427167][T13856] ? perf_trace_lock_acquire+0xf5/0x530 [ 1522.432741][T13856] ? ___might_sleep+0x163/0x280 [ 1522.437713][T13856] ? selinux_file_mprotect+0x620/0x620 [ 1522.443272][T13856] ? __fget+0x384/0x560 [ 1522.447483][T13856] ? ksys_dup3+0x3e0/0x3e0 [ 1522.451921][T13856] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1522.458280][T13856] ? fput_many+0x12c/0x1a0 [ 1522.462807][T13856] tomoyo_file_ioctl+0x23/0x30 [ 1522.467588][T13856] security_file_ioctl+0x77/0xc0 [ 1522.472517][T13856] ksys_ioctl+0x57/0xd0 [ 1522.476659][T13856] __x64_sys_ioctl+0x73/0xb0 [ 1522.481326][T13856] do_syscall_64+0xfd/0x6a0 [ 1522.485992][T13856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1522.491870][T13856] RIP: 0033:0x459879 [ 1522.495768][T13856] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1522.515357][T13856] RSP: 002b:00007f7f47f01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.523758][T13856] RAX: ffffffffffffffda RBX: 00007f7f47f01c90 RCX: 0000000000459879 [ 1522.531714][T13856] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1522.539667][T13856] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1522.547622][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f47f026d4 [ 1522.555584][T13856] R13: 00000000004c41b3 R14: 00000000004d83c8 R15: 0000000000000004 [ 1522.589401][T13874] mkiss: ax0: crc mode is auto. 23:42:25 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x80000001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) 23:42:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, &(0x7f00000001c0)=""/255, 0xff, 0x40, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80) bind(r0, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x4}}, 0x80) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x800, 0x0) unlinkat(r1, &(0x7f00000003c0)='./file0\x00', 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d63c2e61b33059c6271f5f6cbaa0acf09442faf608efe84eb9aa3963b6e3503c38d31d01fd8995f5ba0b28b90184b1b707972ba0b0745ec9d42aeb4e72429a80ec005deb5ec"]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'nr0\x00', 0x2}, 0x18) [ 1522.769274][T13860] mkiss: ax0: crc mode is auto. [ 1523.054580][T13874] mkiss: ax1: crc mode is auto. 23:42:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1523.539710][T13909] IPVS: Unknown mcast interface: nr0 [ 1523.616281][T13930] IPVS: Unknown mcast interface: nr0 23:42:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffc0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) [ 1523.696606][T13931] ref_ctr_offset mismatch. inode: 0x423a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 [ 1523.778363][T13856] ERROR: Out of memory at tomoyo_realpath_from_path. 23:42:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fa) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) 23:42:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x58, 0x48000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 23:42:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdd) 23:42:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2c, 0x400) recvmsg(r0, &(0x7f0000003580)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x5, &(0x7f0000003500)=""/112, 0x70}, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x57a9cdd4a7501003, &(0x7f00000035c0)={@empty, @empty, r2}, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) [ 1524.455156][T13948] mkiss: ax0: crc mode is auto. 23:42:27 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:27 executing program 3: prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000300)=@rc, 0x80, &(0x7f0000001640)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/148, 0x94}, {&(0x7f0000001440)=""/82, 0x52}, {&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f00000015c0)=""/107, 0x6b}], 0x5, &(0x7f00000016c0)=""/187, 0xbb}, 0x8001}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001780)=""/140, 0x8c}, {&(0x7f0000001840)=""/81, 0x51}, {}, {&(0x7f00000018c0)}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/241, 0xf1}, {&(0x7f0000001a40)=""/23, 0x17}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x8, &(0x7f0000002b00)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000003b00)=@can={0x1d, 0x0}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003b80)=""/79, 0x4f}, {&(0x7f0000003c00)=""/173, 0xad}], 0x2}, 0x1}, {{&(0x7f0000003d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d80)=""/127, 0x7f}, {&(0x7f0000003e00)=""/102, 0x66}], 0x2, &(0x7f0000003ec0)=""/149, 0x95}, 0x5}, {{&(0x7f0000003f80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004000)=""/135, 0x87}, {&(0x7f00000040c0)=""/137, 0x89}, {&(0x7f0000004180)}, {&(0x7f00000041c0)=""/20, 0x14}, {&(0x7f0000004200)=""/36, 0x24}, {&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/235, 0xeb}], 0x7, &(0x7f0000004400)=""/43, 0x2b}, 0x1}, {{&(0x7f0000004440)=@xdp, 0x80, &(0x7f0000004700)=[{&(0x7f00000044c0)=""/103, 0x67}, {&(0x7f0000004540)}, {&(0x7f0000004580)=""/153, 0x99}, {&(0x7f0000004640)=""/192, 0xc0}], 0x4}, 0x8}, {{&(0x7f0000004740)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000004a40)=[{&(0x7f00000047c0)=""/19, 0x13}, {&(0x7f0000004800)=""/66, 0x42}, {&(0x7f0000004880)=""/215, 0xd7}, {&(0x7f0000004980)=""/163, 0xa3}], 0x4}}, {{&(0x7f0000004a80)=@sco, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/28, 0x1c}], 0x1, &(0x7f0000004b80)=""/143, 0x8f}, 0x100000000}], 0x8, 0x2, &(0x7f0000004e40)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000004e80)={r2, 0xb29, 0x100000000, 0xd62, 0x320e, 0x4, 0x101}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) fstat(r0, &(0x7f0000004fc0)) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x0, 0x100000001, 0x0, 0x3, 0xa, 0x9, 0x0, 0x4, 0x9, 0x2ff, 0x4415, 0x6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000000)={0x0, 0xe5753a2234f06347, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000018c0)={r5, 0x80000, r3}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000180)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000005040)=0x4000004) r7 = eventfd2(0x9, 0x1) io_setup(0x8, &(0x7f0000005080)=0x0) io_cancel(r8, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x8, 0x10000, r6, &(0x7f00000050c0)="ad66707e967940869d2e212a7ffe1391c8be8bba3ed9d71e2c65a0a8d619d263a634f0bd161bf6d62989944552365f31272f96e15861e325446f8bcdc75fed6471e70f7893bfdd10b8634e5d07829c16bb3a66bf18afadb1a5fcb3a2f2caf950baffcc5c22d0ec2924af9f0a27b9ea7c84d77e91626e9a559eb6c3ca8ad85609d82d38c758521f265572696cfd9d30e3ab49892e550e2bac15acb6e770ef35a8762f9307a42b18390f4f5171b59de298b51d1c9b391cbea973208bbc500c2ea7bf8fba348d1a0206224cb11adc591351e458eb5d76edb961b61c", 0xda, 0x4b0, 0x0, 0x0, r7}, &(0x7f0000005200)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) getresuid(&(0x7f0000004180), &(0x7f0000004540)=0x0, &(0x7f0000004ec0)) quotactl(0x2, &(0x7f0000001900)='./file0\x00', r9, &(0x7f0000004f00)="4c0f48ea329efeebadd11edace6836ec507bdf9cc4069d7433c2670d7e67cdd8bb123fd540af078a02fbe73e3f8d3052d4809c10432df9274e29987b2e46f82db3c9601757229f807bfa941f0524f893be7763996db913522367e9bcb635ff08d71afab675a10d694e8f55e6dcb7a6deacf443fcfef91ff6dceb503b65dbcc789dd9c393752f625add77390093c92c97a8b169fbdf4b557bb6f78df2d78d1beb92e800fdd40a64cd9aec1a9c775d7a282c4c8e5e") ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000002c0)=0xffffffc0) 23:42:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='\x00', 0x1) [ 1524.789334][T13953] mkiss: ax0: crc mode is auto. 23:42:27 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/capi20\x00', 0x20000, 0x0) syncfs(r0) r1 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1525.227128][T13971] mkiss: ax0: crc mode is auto. 23:42:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000000c0)={0x8e42c22, 0xccf90f, "02a17fb4aa3841a888061accb1b76fb745a3190f550494db", {0x5, 0x4}, 0x85}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) writev(r1, &(0x7f0000000800)=[{&(0x7f00000003c0)="26a416541d6592cdee1055fb6d220356f62e252dae49aad419ada2e96a0bd862ad414c29c16e4e06b1770d5518260edb2c0d3889d703ad7188a438d62a788a3d5e73dbd381fbff526d71c559a4e2e2526f4390ce7d7bebe727ce0ff415a0f447893b3507a794444739fa2dbe8ec0091d79a7df62ac5d02b5c5c809d0e6b3ec335219ea55909dadf1099231934dcddf609ad905fc5e157634c94da4797e71951e9a61d637993a937afe83d186ca01333e344a7123270fb9f1628e1e7b4a2570639cd6521b05b87059715661af0aa09a6f59006db232670cf960e777026e8933ae665a8b84fc", 0xe5}, {&(0x7f00000004c0)="480e59669c64ecfc0fc505bb002d2d89d3312b7968745b52abd2ec778a51b1b23b64d90a359c0bfd86d82fa66c6881024661cb6102b20fa099a5e30c51d8f2b8951f8b57d6e9adc0db7ab87867b76925728c8e67a09bf92d25c9b8abd8c2e262e069f6f9967a12f0f55a47fa407fb0609c9dee071844746e4c51b22cf4b8bcc1e592b67a650d7a3f320576497a983511156c58e024371791c5c3ac4240a59c465a3d64f5d3a10c22ba73503041062f153c239cf3b018483b623b58baa796571ebdcf68712a35e14d633e7ae68c9ecf6ea23a633c08c60b475a", 0xd9}, {&(0x7f00000005c0)="e983d2172b482f2164fd5b49ab32de3c8cbbfa3ac3ecf77955d65098f26239e05b9a8060d3738cf01d5830568d01d27574405b85632e54b0a94406d06fd374c475ab5214552fae7110f0aa73f9cabfa3b993050b3a38328b198efe076939", 0x5e}, {&(0x7f0000000640)="5c9076bb0c79fd3acaeef17b030f1a42ca7f3f2be087eaa870877ccfcbd0dbd7e8466ba18b66033f06ac288362e5d459c771156bccc6f8a6386038940caf6460d24d9e71f2985b291b9a6a9d727e61769f8dd56e887c20853d6f27807e2e38b7c99ee78922c271073312439ffd4d8346ed1725ea93138f6e5ddf6b969646d22b41599d86027c41d5926bb77ff20ad635927e7eecccc37e111f7d6a899945227ad0e50868cff8f2fc", 0xa8}, {&(0x7f0000000700)="ef3996b0bbeb3898e0341815d45031ae6295886fd939ac03cdf47f45463437ea71f85f97f6d2cf49ad78ed0b62b377cab763386cb007bb590835b51fb2dc833b1be0f69bd42e9cb5a374aaf8968054464a4ce5c55b29ed76629ce73d2cb4fd5707d7ec3e9cb456f05e330fe7876e79544b06870c8562a4c84e8447234e956d9742d587d1", 0x84}, {&(0x7f00000007c0)}], 0x6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=c']) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) 23:42:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r1, r2, r3}, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x10005) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)) 23:42:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) fcntl$notify(r0, 0x402, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1525.834267][T14005] mkiss: ax0: crc mode is auto. 23:42:28 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:28 executing program 0: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000) r0 = socket$inet6(0xa, 0x3, 0x800000000000000d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x800, 0x1}, 0x20) [ 1526.436106][T14031] ref_ctr_offset mismatch. inode: 0x4106 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3e6 23:42:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x9, 0x10002) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000100)={0x3, 0x7, 0x8b, 0x7fffffff, 0x7, 0x9}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x7, 0x1, {0xffffffffffffffff, 0x1, 0x5, 0x3, 0x4}}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1529.493383][T27629] rxrpc: Assertion failed [ 1529.498245][T27629] ------------[ cut here ]------------ [ 1529.503804][T27629] kernel BUG at net/rxrpc/local_object.c:433! [ 1529.664072][T27629] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1529.670189][T27629] CPU: 1 PID: 27629 Comm: kworker/1:4 Not tainted 5.3.0-rc6+ #122 [ 1529.677992][T27629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.688064][T27629] Workqueue: krxrpcd rxrpc_local_processor [ 1529.693918][T27629] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 1529.700247][T27629] Code: 3f 64 c0 fa 0f 0b e8 e4 c4 d6 fa 48 c7 c7 e0 59 3a 88 e8 2c 64 c0 fa 0f 0b e8 d1 c4 d6 fa 48 c7 c7 e0 59 3a 88 e8 19 64 c0 fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [ 1529.719943][T27629] RSP: 0018:ffff888052c67ce8 EFLAGS: 00010282 [ 1529.726017][T27629] RAX: 0000000000000017 RBX: ffff8880a75b84b8 RCX: 0000000000000000 [ 1529.734085][T27629] RDX: 0000000000000000 RSI: ffffffff815c2576 RDI: ffffed100a58cf8f [ 1529.742064][T27629] RBP: ffff888052c67d30 R08: 0000000000000017 R09: ffffed1015d260d1 [ 1529.750045][T27629] R10: ffffed1015d260d0 R11: ffff8880ae930687 R12: ffff888098aa7888 [ 1529.758021][T27629] R13: ffff88805f2a0a88 R14: ffff8880a75b8480 R15: ffff88809a54ea00 [ 1529.766090][T27629] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1529.775118][T27629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1529.781707][T27629] CR2: 00007ff950b8dfa0 CR3: 0000000052b26000 CR4: 00000000001406e0 [ 1529.789710][T27629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1529.797776][T27629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1529.805764][T27629] Call Trace: [ 1529.809078][T27629] process_one_work+0x9af/0x1740 [ 1529.814289][T27629] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1529.819670][T27629] ? lock_acquire+0x190/0x410 [ 1529.824367][T27629] worker_thread+0x98/0xe40 [ 1529.828876][T27629] ? trace_hardirqs_on+0x67/0x240 [ 1529.833920][T27629] kthread+0x361/0x430 [ 1529.837998][T27629] ? process_one_work+0x1740/0x1740 [ 1529.843203][T27629] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1529.849459][T27629] ret_from_fork+0x24/0x30 [ 1529.853880][T27629] Modules linked in: [ 1530.083507][ T3908] kobject: 'loop5' (000000008f0fd413): kobject_uevent_env [ 1530.154132][ T3908] kobject: 'loop5' (000000008f0fd413): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1531.111466][T27629] ---[ end trace df1d14723dfc898e ]--- [ 1531.144322][T27629] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 1531.150688][T27629] Code: 3f 64 c0 fa 0f 0b e8 e4 c4 d6 fa 48 c7 c7 e0 59 3a 88 e8 2c 64 c0 fa 0f 0b e8 d1 c4 d6 fa 48 c7 c7 e0 59 3a 88 e8 19 64 c0 fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [ 1531.239737][T27629] RSP: 0018:ffff888052c67ce8 EFLAGS: 00010282 [ 1531.260999][T27629] RAX: 0000000000000017 RBX: ffff8880a75b84b8 RCX: 0000000000000000 [ 1531.278484][T27629] RDX: 0000000000000000 RSI: ffffffff815c2576 RDI: ffffed100a58cf8f [ 1531.287064][T27629] RBP: ffff888052c67d30 R08: 0000000000000017 R09: ffffed1015d260d1 [ 1531.296028][T27629] R10: ffffed1015d260d0 R11: ffff8880ae930687 R12: ffff888098aa7888 [ 1531.305288][T27629] R13: ffff88805f2a0a88 R14: ffff8880a75b8480 R15: ffff88809a54ea00 [ 1531.313377][T27629] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1531.323043][T27629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1531.330068][T27629] CR2: ffffffffff600400 CR3: 0000000094430000 CR4: 00000000001406e0 [ 1531.338103][T27629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1531.346294][T27629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1531.354300][T27629] Kernel panic - not syncing: Fatal exception [ 1531.362052][T27629] Kernel Offset: disabled [ 1531.366426][T27629] Rebooting in 86400 seconds..