0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x100000001})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, <r1=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000180)={0x0, 0x80000001, 0x9, 0x1, [], [], [], 0x0, 0x4, 0x0, 0x0, "017bdbc438bf521d5b61ad341a76961a"})
r2 = dup2(r0, r1)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000040)={{0x9, 0x100000001}, {0xffffffffffffff4d, 0x7fff}, 0x4, 0x1, 0x5})
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  313.192221] binder: 13472:13473 ioctl 40046207 0 returned -16
[  313.206825] binder: undelivered death notification, 0000000000000000
08:28:14 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  313.246526] binder: BINDER_SET_CONTEXT_MGR already set
08:28:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
semop(0x0, &(0x7f00000001c0)=[{0x0, 0x0, 0x1000}], 0x1)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8001)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e24, @empty}}}, 0xa0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18)
r3 = semget$private(0x0, 0x7, 0x0)
semtimedop(r3, &(0x7f0000000540)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)

08:28:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004000c0012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2000000000000000)

[  313.275922] binder: 13488:13489 ioctl 40046207 0 returned -16
[  313.349722] binder: 13488:13490 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:14 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304400000ec000e630c4000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, r3, 0x1900)

08:28:14 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  313.417686] binder: undelivered death notification, 0000000000000000
[  313.441531] binder: BINDER_SET_CONTEXT_MGR already set
08:28:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004000e0012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  313.470009] binder: 13505:13506 ioctl 40046207 0 returned -16
[  313.537073] binder: undelivered death notification, 0000000000000000
08:28:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6000000000000000)

[  313.578937] binder: 13515:13516 Acquire 1 refcount change on invalid ref 15466496 ret -22
08:28:14 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  313.648855] binder: BINDER_SET_CONTEXT_MGR already set
08:28:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004003f0012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  313.680338] binder: 13515:13519 Acquire 1 refcount change on invalid ref 15466496 ret -22
[  313.738714] binder: BINDER_SET_CONTEXT_MGR already set
[  313.744175] binder: 13515:13516 ioctl 40046207 0 returned -16
[  313.766159] binder: 13523:13524 ioctl 40046207 0 returned -16
08:28:15 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  313.793429] binder: 13523:13535 Acquire 1 refcount change on invalid ref 0 ret -22
[  313.867476] binder: 13523:13530 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:15 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = getpid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0xb, 0x6, @tid=r1}, &(0x7f00000000c0))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000dffc0c00000000000000000000005b659a620700fc320c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc17006779fd16e2bfbb353a158cf0d7030df7f1969136edfd73294c0356675ffff00000000000000004ce56aa166b5040d"], 0x83}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7a, @loopback}, 0x1c)
r3 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x4}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000001c0)={0x4, 0x80})
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x3, 0x1, 0xfffffffffffffff9, 0x0, 0x1, r3})
tkill(r3, 0x1000000000015)

08:28:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05630440000000000e630c4000000000af3d2a610775eb583282e043a5d0eeb7fa4ec5755cd58eb6c65722027c17c89661fabee412125e8c20851ff111ac7f53a939679b70f008daa986"], 0x0, 0x0, 0x0})
r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000240))
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x2, 0x3ff, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4090)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
openat$cgroup_int(r3, &(0x7f0000000380)='cpu.weight.nice\x00', 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x0, 0x0)

08:28:15 executing program 2:
r0 = open(&(0x7f0000000380)='./bus\x00', 0x47f, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0)

08:28:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000401420012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:15 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfdfdffff00000000)

08:28:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
close(r0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  314.377690] binder: BINDER_SET_CONTEXT_MGR already set
08:28:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000465580012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:15 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00')
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @remote}, {0x2, 0x4e22, @local}, 0x101, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000080)='lapb0\x00', 0x9, 0x1, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  314.409303] binder: 13556:13558 ioctl 40046207 0 returned -16
08:28:15 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x8c02)
r1 = dup(r0)
ioctl$TIOCEXCL(r1, 0x540c)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x5)
ioctl$SG_IO(r0, 0x2284, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000))

08:28:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1363"], 0x0, 0x0, 0x0})
r1 = dup(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x4)
fanotify_mark(r1, 0x2, 0x40000000, r2, &(0x7f0000000080)='./file0\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x1, 0x2, 0xfffffffffffffff7, 0x7, 0x9, 0x6d861b46})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  314.539415] binder: BINDER_SET_CONTEXT_MGR already set
[  314.558234] binder: 13576:13578 ioctl 40046207 0 returned -16
[  314.637022] binder: 13587:13588 unknown command 25363
[  314.655003] binder: 13587:13588 ioctl c0306201 200001c0 returned -22
[  314.671645] binder: 13587:13588 ioctl 40286608 20000100 returned -22
[  314.680667] binder: BINDER_SET_CONTEXT_MGR already set
[  314.686544] binder: 13587:13590 unknown command 25363
[  314.692895] binder: 13587:13588 ioctl 40046207 0 returned -16
[  314.699019] binder: 13587:13590 ioctl c0306201 200001c0 returned -22
[  314.714669] binder: 13587:13590 ioctl 40286608 20000100 returned -22
[  315.344842] net_ratelimit: 22 callbacks suppressed
[  315.344848] protocol 88fb is buggy, dev hsr_slave_0
[  315.354928] protocol 88fb is buggy, dev hsr_slave_1
[  315.664870] protocol 88fb is buggy, dev hsr_slave_0
[  315.670020] protocol 88fb is buggy, dev hsr_slave_1
[  316.224878] protocol 88fb is buggy, dev hsr_slave_0
[  316.229974] protocol 88fb is buggy, dev hsr_slave_1
[  316.544865] protocol 88fb is buggy, dev hsr_slave_0
[  316.549990] protocol 88fb is buggy, dev hsr_slave_1
[  316.864828] protocol 88fb is buggy, dev hsr_slave_0
[  316.869909] protocol 88fb is buggy, dev hsr_slave_1
08:28:18 executing program 3:
perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x858, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="000000800a004e2100000020ff020000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000030000000a004e23000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000080019e56c251ae2ee3cb762823f4273bc8260000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcc10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000001ff0200000000000000000000000000017fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1)
keyctl$get_security(0x11, 0x0, &(0x7f0000000080)=""/12, 0xc)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0xffffffffffffffff, 0x260}, {0x3, 0x2}]}, 0x14, 0x3)

08:28:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400600012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:18 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440000000001e43810c40000100"], 0x0, 0x0, 0x0})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x1, 0x0)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x7fffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:18 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x10d, 0x41, 0x0, 0x0)

08:28:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x142, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0xffffffffffffff2e, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000480)="000000000000bf23a4000000000000cbcb2500551a763a2450da603286000000000090a222b2fa9df5739fdcc088e62c7346c89ec9c6ca800d0300800000553334fb419bd9", 0x45, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sendto$inet6(r0, &(0x7f0000000380)="b4", 0x1, 0x0, 0x0, 0x0)

[  317.038552] binder: 13597:13598 unknown command 0
[  317.049541] binder: BINDER_SET_CONTEXT_MGR already set
[  317.065039] binder: 13597:13598 ioctl c0306201 20000000 returned -22
[  317.095408] binder: 13594:13604 ioctl 40046207 0 returned -16
[  317.107073] binder_thread_write: 18 callbacks suppressed
[  317.107088] binder: 13597:13610 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000458650012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:18 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  317.149303] binder: BINDER_SET_CONTEXT_MGR already set
[  317.155206] binder: 13594:13607 unknown command 209797918
[  317.160922] binder: 13594:13607 ioctl c0306201 20000000 returned -22
[  317.181169] binder: 13597:13598 ioctl 40046207 0 returned -16
[  317.188977] binder: 13597:13610 unknown command 0
08:28:18 executing program 3:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@ipv4={[], [], @broadcast}, 0x43})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'GPL\x00'}, 0x2b, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000440)={<r2=>0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000640)={r2, 0x20, &(0x7f00000005c0)=[@in={0x2, 0x0, @rand_addr=0x100000000}, @in={0x2, 0x0, @remote}]}, &(0x7f0000000680)=0x10)

[  317.194642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  317.218055] binder: 13594:13604 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  317.233713] binder: 13597:13621 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  317.234065] binder: 13597:13610 ioctl c0306201 20000000 returned -22
08:28:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400810012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:18 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  317.283917] binder: BINDER_SET_CONTEXT_MGR already set
[  317.292613] binder: 13594:13626 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  317.333947] binder: 13594:13604 ioctl 40046207 0 returned -16
[  317.334510] binder: 13594:13607 unknown command 209797918
08:28:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x9, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00')
sendfile(r0, r1, 0x0, 0x80000001)
syz_genetlink_get_family_id$fou(0x0)

08:28:18 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[@window={0x3, 0x0, 0x800}, @mss], 0x2037)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000580))

[  317.509550] binder: 13641:13645 ioctl c0306201 20000180 returned -14
[  317.517540] binder: 13594:13607 ioctl c0306201 20000000 returned -22
[  317.531463] binder: BINDER_SET_CONTEXT_MGR already set
[  317.541356] binder: 13641:13647 ioctl c0306201 20000180 returned -14
[  317.552861] binder: 13641:13645 ioctl 40046207 0 returned -16
08:28:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x202000, 0x0)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'veth1_to_team\x00', 0x800})
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3c4b, 0x40)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x1, 0x18, [0x9, 0x4, 0x2, 0x280000000000, 0x2, 0x401]})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:18 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400f00012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  317.569143] binder_release_work: 4 callbacks suppressed
[  317.569151] binder: undelivered death notification, 0000000000000000
[  317.610259] binder: undelivered death notification, 0000000000000000
08:28:18 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

08:28:18 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

08:28:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="85000000040007ffff000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  317.710035] binder: undelivered death notification, 0000000000000000
[  317.768834] binder: BINDER_SET_CONTEXT_MGR already set
[  317.774160] binder: 13658:13659 ioctl 40046207 0 returned -16
[  317.783474] binder: BINDER_SET_CONTEXT_MGR already set
[  317.804699] binder: 13666:13667 ioctl 40046207 0 returned -16
08:28:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  317.825783] binder: undelivered death notification, 0000000000000000
08:28:19 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x3)

08:28:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400020012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  317.868427] binder: 13666:13667 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fe8bc3de2e927cd805bd6304e66f137fc1410a2d"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  317.913642] binder: 13666:13667 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  317.920910] binder: 13666:13676 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  317.994950] binder: 13685:13687 unknown command -557609986
[  318.020223] binder: 13685:13687 ioctl c0306201 20000000 returned -22
[  318.050131] binder: 13685:13690 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  318.082711] binder: BINDER_SET_CONTEXT_MGR already set
[  318.103419] binder: 13666:13693 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  318.118823] binder: BINDER_SET_CONTEXT_MGR already set
[  318.124205] binder: 13666:13676 ioctl 40046207 0 returned -16
[  318.130607] binder: 13685:13690 ioctl 40046207 0 returned -16
[  318.147271] binder: 13685:13694 unknown command -557609986
[  318.156731] binder: 13685:13694 ioctl c0306201 20000000 returned -22
[  318.163737] binder: 13685:13687 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xc5)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0xfdef)
sendfile(r1, r1, 0x0, 0xe08c)

08:28:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:19 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x2, 0x9})

08:28:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400040012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c63a9d570a238868e017f7ec153a76a81afe3c5f0a4698f7d62a6b9d9d90cdfb5df1892ddabc9b5f9820d0541c1e61eb5e9d4dd8a1cf7ec6f58b608a09b7dd3301442d63100187f375bfbb3e6c1cff2504d16e2d58d15aa0ccccd74f43bfdece5362ba29f9302f3bb2979eb8a94aea7cd4d4086baf0181c5964684e80ad21d67823d20f4d6834d0c35b9935985b7bb41d72612b555150bef4c0200055e9adb4b74d63cbcc6a04a8b9a920e801325dd001ecda4ecf4d591efb96a4f54f6f290275e1cdd660f4259c9339b3c2144b4f3a234ac9d947ecf947e20bf27d0426611e1ce1c22092bbee6ccfa1560680149d2b3b4f93385e5deff4b98fe30334914874"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  318.367929] binder: 13704:13705 unknown command -710319348
[  318.387608] binder: 13704:13705 ioctl c0306201 200001c0 returned -22
08:28:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  318.416807] binder: BINDER_SET_CONTEXT_MGR already set
[  318.435384] binder: 13706:13709 ioctl 40046207 0 returned -16
08:28:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400060012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:19 executing program 2:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80)
clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005800)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @local}}}}, &(0x7f0000005900)=0xe8)
r3 = dup3(0xffffffffffffffff, r1, 0x80000)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xaf4)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r2}, 0x48)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@ipv4={[], [], @broadcast}, 0x43, r2})
exit(0xb0ffffff00000008)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180), 0xc)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'GPL\x00'}, 0x2b, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={<r4=>0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000640)={r4, 0x20, &(0x7f00000005c0)=[@in={0x2, 0x0, @rand_addr=0x100000000}, @in={0x2, 0x0, @remote}]}, &(0x7f0000000680)=0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz1'}, 0x4)

[  318.458389] binder: undelivered death notification, 0000000000000000
[  318.468264] binder: BINDER_SET_CONTEXT_MGR already set
[  318.473563] binder: 13704:13705 ioctl 40046207 0 returned -16
[  318.482268] binder: 13704:13713 unknown command -710319348
[  318.523178] binder: 13704:13713 ioctl c0306201 200001c0 returned -22
[  318.551690] binder: BINDER_SET_CONTEXT_MGR already set
08:28:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400080012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  318.576021] binder: 13706:13725 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  318.593747] binder: 13704:13727 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:19 executing program 3:
clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000540)=""/11, 0x485)
execve(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
creat(&(0x7f0000000600)='./file1\x00', 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480))
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
r2 = dup2(r0, r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, 0x0)

08:28:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004000a0012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  318.627524] binder: 13706:13709 ioctl 40046207 0 returned -16
[  318.650671] binder: undelivered death notification, 0000000000000000
08:28:20 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000400)=""/239, 0xffffffffffffff7e)

08:28:20 executing program 1:
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$revoke(0x3, r0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x893f, 0x80)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x7ff, 0x80000000, 0xb5, 0x1, 0x4, 0x4, 0x3f, 0x7, 0xc2, 0x74c4e63, 0x7, 0x4, 0x3f}, {0x5, 0x9, 0xc91b, 0x1, 0x4, 0x0, 0xf245, 0x0, 0x100000000, 0x1, 0xb2c4, 0x0, 0x6}, {0x9, 0x40f7, 0x1, 0x9, 0x9, 0xfffffffffffffffe, 0xfff, 0x6, 0x200, 0x9, 0x52, 0x9, 0x1f}], 0x101})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

08:28:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004000c0012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:20 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  318.844003] binder: BINDER_SET_CONTEXT_MGR already set
[  318.871089] binder: 13749:13752 ioctl 40046207 0 returned -16
08:28:20 executing program 3:
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
rmdir(&(0x7f0000000100)='./file1\x00')
fchdir(r0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x10000, 0x0)
recvmsg(r1, &(0x7f0000000980)={&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/238, 0xee}], 0x6}, 0x0)
write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
clone(0x2000006102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0)

08:28:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05633940000019000e630c9d99000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40400, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xf0, r2, 0x80a, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1400000000000000}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040001}, 0x4080)

[  319.048457] binder: 13769:13771 unknown command 1077502725
[  319.079708] binder: 13769:13771 ioctl c0306201 20000000 returned -22
[  319.094076] binder: BINDER_SET_CONTEXT_MGR already set
[  319.099952] binder: 13769:13771 ioctl 40046207 0 returned -16
08:28:20 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

08:28:20 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x6, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)

08:28:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x1ff, 0xffffffffffffffc8, 0x6, 0x2})

08:28:20 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004000e0012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c63c437db882dd0619c9edfebb3a76854cf49567e9d3c774d000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400100012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  319.438369] binder: BINDER_SET_CONTEXT_MGR already set
[  319.458217] binder: undelivered death notification, 0000000000000000
[  319.468342] binder: 13789:13790 ioctl 40046207 0 returned -16
[  319.482033] binder: 13789:13794 unknown command 935617292
08:28:20 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:20 executing program 3:
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000004c0))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8, 0x1ff, 0x8, 0x1, 0x0, 0x5, 0x4, 0x9]}, 0x0)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10000000000000, 0x0, 0x46, 0x2)
sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000b00))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x2000000003, 0x0)
socket$netlink(0x10, 0x3, 0x4)

[  319.505915] binder: BINDER_SET_CONTEXT_MGR already set
[  319.512002] binder: 13789:13794 ioctl c0306201 200001c0 returned -22
[  319.545313] binder: 13780:13788 ioctl 40046207 0 returned -16
08:28:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400600012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  319.572461] binder: 13789:13790 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:20 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8)
setreuid(r1, r2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x676182b7f22ae345, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000400))

[  319.707289] binder: 13789:13813 unknown command 935617292
[  319.724354] binder: 13789:13813 ioctl c0306201 200001c0 returned -22
[  319.775264] binder: undelivered death notification, 0000000000000000
[  319.976263] binder: 13817:13818 ioctl 81009431 20000400 returned -22
[  319.983724] binder: undelivered death notification, 0000000000000000
[  320.384907] net_ratelimit: 18 callbacks suppressed
[  320.384917] protocol 88fb is buggy, dev hsr_slave_0
[  320.395217] protocol 88fb is buggy, dev hsr_slave_1
[  320.704871] protocol 88fb is buggy, dev hsr_slave_0
[  320.710094] protocol 88fb is buggy, dev hsr_slave_1
[  321.024855] protocol 88fb is buggy, dev hsr_slave_0
[  321.030029] protocol 88fb is buggy, dev hsr_slave_1
[  321.035253] protocol 88fb is buggy, dev hsr_slave_0
[  321.040357] protocol 88fb is buggy, dev hsr_slave_1
[  321.584843] protocol 88fb is buggy, dev hsr_slave_0
[  321.589976] protocol 88fb is buggy, dev hsr_slave_1
08:28:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000480)="000000000000bf23a4000000000000cbcb2500551a763a2450da603286000000000090a222b2fa9df5739fdcc088e62c7346c89ec9c6ca800d0300800000553334fb419bd977554a4ded07fc27da053b2db760ced0b793917d90d68fa0d30a5d21058dfdf84250798e7c526fd8d454a6d639a84f1403007d326a11e58b3b90", 0x7f, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sendto$inet6(r0, &(0x7f0000000380)="b4", 0x1, 0x0, 0x0, 0x0)

08:28:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400f00012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:23 executing program 4:
prctl$PR_GET_TIMERSLACK(0x1e)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9cc93a3a9fe9ba0fe38c1a72f372a744c54ce2e3f0b2c1fd1405915f4e04fc28cb30945f8ee5702c793100e3bb4fc89880d32420d62f62a46c2d1c494cbe319585f0de7700b6da88b53c0d68e16798158c5a4caf80c49de20d43f5a0205ff0f635b2ac7f398df781e10f9b67eceb2340ac98f655555fce0cc47e09d646cc7e83f2f2abc86b6dd1a136efda2be0e0b7d901aefd19ebdddd4d58961b5e0d8b76520ff31f3b61193e7263bd"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056345294c3610b9cb05332f09e704405ea265c4181f43e91654993c8e996fcdc1236e3426b1c7910900000000000000fc7f61c7a1895082f2d2a384d5d456f5d1aebf5cbbbb56d4906cfa45b6f18636b92ba8fc5db13d26060bdf3af351814efc9abf233464ead6bd2ed2193a9aa7c43ef18757bf4b6f019568710f1a10392143d019e217db5669895d3ab2a2f5c9bb3112413ca84c8936090094eaa842b14fdb1ef9fe802bdcb3d8010000000000000f4ebffa7aaebe56d8bd74a2f27af1ad2ce2c9714d9e59dad873ed1a766793c6d67a1f6f8f54bbde01000000000000006b4ba917"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c67e4205e60"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080))
r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x8, 0x400000)
bind$can_raw(r2, &(0x7f0000000180), 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}], 0x1c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:23 executing program 3:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
sched_setscheduler(0x0, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
pipe(0x0)
pselect6(0xffffffffffffffc9, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x40046104, &(0x7f0000000200))

[  321.894342] binder: undelivered death notification, 0000000000000000
[  321.901426] binder: BINDER_SET_CONTEXT_MGR already set
[  321.918094] binder: 13832:13833 ioctl 40046207 0 returned -16
[  321.926928] binder: 13832:13833 unknown command 976931228
[  321.932749] binder: 13832:13833 ioctl c0306201 200001c0 returned -22
[  321.935684] binder: BINDER_SET_CONTEXT_MGR already set
08:28:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400420112000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:23 executing program 3:
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x2, 0x400)
accept$unix(r0, &(0x7f00000014c0), 0x0)
openat$vhci(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vhci\x00', 0x0)
socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0xffffffff08000000, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0))
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001740)='tasks\x00', 0x2, 0x0)
clock_gettime(0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000001c0)={r0, 0x7, 0x6, "ead7ec2c9ee5c5aa6f125dd32af7ef50e8e1e04730b5b13ba86b21cab7ab1304f1367aabff529e7974fe0620f1ff153d2454"})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000))
socketpair$unix(0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000))
socket$packet(0x11, 0x0, 0x300)
r4 = socket$inet6(0xa, 0x3, 0x84)
sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  321.944539] binder: 13834:13835 ioctl 40046207 0 returned -16
[  321.947681] binder: 13832:13833 unknown command 692413189
[  321.956550] binder: 13832:13833 ioctl c0306201 20000000 returned -22
[  321.983682] binder: 13832:13833 unknown command 1728865039
08:28:23 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
dup(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x5421, 0x711fff)

08:28:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  322.042674] binder: 13832:13833 ioctl c0306201 20008fd0 returned -22
08:28:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7fff, 0x8, 0x100000000, 0x4, 0x100, 0x1})

[  322.093613] binder: 13832:13853 unknown command 976931228
08:28:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000612000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  322.135173] binder: 13832:13859 unknown command 692413189
[  322.195354] binder: 13832:13833 unknown command 1728865039
[  322.206556] binder: BINDER_SET_CONTEXT_MGR already set
[  322.219426] binder: 13832:13853 ioctl c0306201 200001c0 returned -22
[  322.234610] binder: 13832:13833 ioctl c0306201 20008fd0 returned -22
08:28:23 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='3yz0\x00', 0x1ff)

08:28:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  322.234954] binder: 13873:13874 ioctl 40046207 0 returned -16
[  322.244733] binder: 13832:13859 ioctl c0306201 20000000 returned -22
08:28:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000a12000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0xff41, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:23 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r0, 0x0)

[  322.338700] binder: 13873:13874 Acquire 1 refcount change on invalid ref 0 ret -22
[  322.367628] binder_thread_write: 7 callbacks suppressed
[  322.367643] binder: 13873:13874 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
08:28:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000c12000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  322.431665] binder: 13873:13882 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  322.448835] binder: 13890:13892 unknown command 808482864
[  322.453436] binder: 13873:13874 ioctl 40286608 20000040 returned -22
[  322.477882] binder: BINDER_SET_CONTEXT_MGR already set
[  322.483511] binder: 13873:13894 ioctl 40286608 20000040 returned -22
[  322.507945] binder: 13873:13874 ioctl 40046207 0 returned -16
[  322.520221] binder: 13890:13892 ioctl c0306201 20000100 returned -22
[  322.579235] binder: BINDER_SET_CONTEXT_MGR already set
[  322.579532] binder: 13890:13895 unknown command 808482864
[  322.620018] binder: 13890:13892 ioctl 40046207 0 returned -16
[  322.629439] binder: 13890:13895 ioctl c0306201 20000100 returned -22
[  322.643233] binder_release_work: 2 callbacks suppressed
[  322.643241] binder: undelivered death notification, 0000000000000000
[  322.676858] binder: undelivered death notification, 0000000000000000
08:28:24 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x0, 0x84}})

08:28:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x21000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
syslog(0x3, &(0x7f0000000040)=""/46, 0x2e)

08:28:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2)
write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x0, 0x4, 0x7}}, 0x14)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:24 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000e12000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x4, 0xfc7, 0x4, 0x0, 0x0, [{r0, 0x0, 0x5}, {r0, 0x0, 0xcc}, {r0, 0x0, 0x81}, {r0, 0x0, 0x4}]})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @speck128})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  322.937922] binder: 13918:13919 unknown command -1
08:28:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400003f12000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:24 executing program 3:
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001200)={0x0, 0x0, 0x0, &(0x7f00000011c0)="0c656533f95b167de0ac185db8f869bad68a25", 0x0, 0x13})
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000001c0))

08:28:24 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  322.985864] binder: BINDER_SET_CONTEXT_MGR already set
[  322.986178] binder: 13918:13919 ioctl c0306201 200001c0 returned -22
[  323.021913] binder: 13915:13917 ioctl 40046207 0 returned -16
[  323.022110] binder: 13918:13925 ioctl 40106614 20000040 returned -22
[  323.058220] binder: BINDER_SET_CONTEXT_MGR already set
[  323.089426] binder: 13918:13919 ioctl 40046207 0 returned -16
[  323.104267] binder: undelivered death notification, 0000000000000000
[  323.117008] binder: 13918:13925 unknown command -1
08:28:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400014212000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  323.175287] binder: 13918:13925 ioctl c0306201 200001c0 returned -22
[  323.187266] binder: BINDER_SET_CONTEXT_MGR already set
[  323.188759] binder: 13915:13941 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  323.192599] binder: 13915:13924 ioctl 40046207 0 returned -16
08:28:24 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6101)
ftruncate(r2, 0x5000)
r3 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x800)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
creat(0x0, 0x0)

[  323.220090] binder: 13918:13939 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:24 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  323.256671] binder: 13918:13948 ioctl 40106614 20000040 returned -22
[  323.267282] binder: undelivered death notification, 0000000000000000
08:28:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400655812000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  323.298401] binder: 13915:13940 Acquire 1 refcount change on invalid ref 0 ret -22
[  323.336163] binder: 13915:13940 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
08:28:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rmdir(&(0x7f0000000040)='./file0\x00')

08:28:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={<r1=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r1}, @dead_binder_done={0x40086310, 0x1}], 0xffdb, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f63acae04ca4d04cfeb8bd58a839a2fd50c400b0000c7d036a4a100"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:24 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x400000000000003, 0x600000000000008, [0x49, 0x1], [0xc2]})

08:28:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400006012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  323.525345] binder: 13967:13968 BC_FREE_BUFFER u0000000000000000 no match
[  323.546681] unchecked MSR access error: WRMSR to 0x49 (tried to write 0x0000000000000001) at rIP: 0xffffffff81304044 (native_write_msr+0x4/0x30)
[  323.549040] binder: 13967:13968 ioctl c0306201 200000c0 returned -14
08:28:24 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040), 0x4)

08:28:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400586512000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:24 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  323.588356] binder: BINDER_SET_CONTEXT_MGR already set
[  323.600818] binder: 13967:13976 unknown command -1364434161
[  323.606719] Call Trace:
[  323.606812]  ? vmx_set_msr+0x13b2/0x21f0
[  323.606845]  ? pt_update_intercept_for_msr+0x690/0x690
[  323.613824]  kvm_set_msr+0x190/0x380
[  323.637968]  do_set_msr+0xa6/0xf0
[  323.649378] binder: 13965:13975 ioctl 40046207 0 returned -16
[  323.657985] binder: 13967:13976 ioctl c0306201 20008fd0 returned -22
[  323.667791]  ? do_get_msr+0x150/0x150
[  323.677726]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
08:28:25 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  323.690027] binder: BINDER_SET_CONTEXT_MGR already set
[  323.699143] binder: 13967:13968 ioctl 40046207 0 returned -16
[  323.709922] binder: BINDER_SET_CONTEXT_MGR already set
[  323.717944] binder: 13967:13984 BC_FREE_BUFFER u0000000000000000 no match
[  323.728873]  msr_io+0x1b0/0x2e0
08:28:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
signalfd(r0, &(0x7f0000000040)={0xffffffff}, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0)
mknodat(r1, &(0x7f0000000100)='./file0\x00', 0x20, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  323.741824] binder: 13965:13975 ioctl 40046207 0 returned -16
[  323.748097] binder: 13967:13984 ioctl c0306201 200000c0 returned -14
[  323.754417]  ? kasan_check_read+0x11/0x20
[  323.764930] binder: 13965:13979 Acquire 1 refcount change on invalid ref 0 ret -22
[  323.774973]  ? do_get_msr+0x150/0x150
[  323.785483]  ? emulator_set_hflags+0xa0/0xa0
08:28:25 executing program 2:
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getegid()
getgid()
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

08:28:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400008112000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  323.789543] binder: 13965:13979 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  323.803835]  ? lock_acquire+0x16f/0x3f0
[  323.854954]  ? kvm_arch_vcpu_ioctl+0x128c/0x3040
[  323.868581]  kvm_arch_vcpu_ioctl+0x12db/0x3040
[  323.876475] binder: undelivered death notification, 0000000000000000
08:28:25 executing program 1:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, 0x6, {0x9, 0x2, 0x0, {0x2, 0x20, 0x2, 0x8, 0x8, 0x7, 0x5, 0x5, 0x3, 0x7ff, 0xe9, r1, r2, 0x6, 0x3}}}, 0x78)
r3 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40140, 0x0)
ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]})

08:28:25 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  323.903861]  ? kvm_arch_vcpu_ioctl+0x128c/0x3040
[  323.936931] binder: BINDER_SET_CONTEXT_MGR already set
[  323.954360]  ? kvm_arch_vcpu_put+0x460/0x460
[  323.963898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  323.975961] binder: 13997:14008 ioctl 40046207 0 returned -16
[  323.978789]  ? mark_held_locks+0xf0/0xf0
08:28:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="85000000040000f012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  323.995661] binder: BINDER_SET_CONTEXT_MGR already set
[  324.002249]  ? perf_trace_lock+0x510/0x510
[  324.011935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  324.035551] binder: 14010:14011 ioctl 40046207 0 returned -16
[  324.042293] binder: undelivered death notification, 0000000000000000
[  324.042951]  ? preempt_schedule+0x4b/0x60
[  324.064487]  ? preempt_schedule_common+0x4f/0xe0
[  324.077792]  ? lock_acquire+0x16f/0x3f0
[  324.082504] binder: 14010:14011 Acquire 1 refcount change on invalid ref 0 ret -22
[  324.094336]  ? kvm_vcpu_ioctl+0x181/0xfa0
[  324.102297] binder: 14010:14011 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  324.106662]  ? __mutex_lock+0x3cd/0x1310
[  324.114166]  ? refcount_sub_and_test_checked+0x154/0x200
[  324.131654] binder: 14010:14016 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  324.134227]  ? kvm_vcpu_ioctl+0x181/0xfa0
[  324.165254] binder: undelivered death notification, 0000000000000000
[  324.169767]  ? refcount_dec_not_one+0x1f0/0x1f0
[  324.189470]  ? migrate_swap_stop+0x920/0x920
[  324.194340]  ? mutex_trylock+0x1e0/0x1e0
[  324.200731]  ? refcount_dec_and_test_checked+0x1b/0x20
[  324.216024]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  324.221409]  ? drop_futex_key_refs.isra.0+0x6f/0xf0
[  324.226670]  ? futex_wake+0x179/0x4d0
[  324.230518]  kvm_vcpu_ioctl+0x8f6/0xfa0
[  324.234510]  ? kvm_vcpu_block+0xcd0/0xcd0
[  324.239233]  ? perf_trace_lock+0xeb/0x510
[  324.243420]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  324.249192]  ? debug_smp_processor_id+0x3c/0x280
[  324.253975]  ? __lockdep_free_key_range+0x120/0x120
[  324.259413]  ? __fget+0x340/0x540
[  324.262868]  ? find_held_lock+0x35/0x130
[  324.267075]  ? __fget+0x340/0x540
[  324.270539]  ? kvm_vcpu_block+0xcd0/0xcd0
[  324.274722]  do_vfs_ioctl+0xd6e/0x1390
[  324.278818]  ? ioctl_preallocate+0x210/0x210
[  324.283249]  ? __fget+0x367/0x540
[  324.286795]  ? ksys_dup3+0x3e0/0x3e0
[  324.290611]  ? nsecs_to_jiffies+0x30/0x30
[  324.294955]  ? security_file_ioctl+0x93/0xc0
[  324.300239]  ksys_ioctl+0xab/0xd0
[  324.304598]  __x64_sys_ioctl+0x73/0xb0
[  324.308623]  do_syscall_64+0x103/0x610
[  324.312535]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  324.312550] RIP: 0033:0x457f29
[  324.312566] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  324.312590] RSP: 002b:00007f43fb152c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  324.341266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29
[  324.356017] RDX: 0000000020000000 RSI: 000000004008ae89 RDI: 0000000000000005
[  324.363305] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  324.370675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43fb1536d4
[  324.378031] R13: 00000000004c0ab0 R14: 00000000004d28c8 R15: 00000000ffffffff
08:28:25 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0)
getresuid(0x0, 0x0, 0x0)
dup3(r1, r2, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0xfffffffffffffe32)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78)

08:28:25 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@generic, &(0x7f0000000100)=0x80)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x1, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000212000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x20002101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000180)={'sy.', 0x0}, &(0x7f0000000040)='\x00', 0xffffffffffffffff)
close(r0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r2=>0x0)
sched_getaffinity(r2, 0x8, &(0x7f0000000080))

[  324.455695] binder: undelivered death notification, 0000000000000000
[  324.459622] binder: BINDER_SET_CONTEXT_MGR already set
[  324.475089] binder: 14024:14031 ioctl 40046207 0 returned -16
[  324.494104] binder: undelivered death notification, 0000000000000000
08:28:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000412000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:25 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  324.503065] binder: BINDER_SET_CONTEXT_MGR already set
[  324.511630] binder: 14024:14031 ioctl 40046207 0 returned -16
[  324.535472] binder: undelivered death notification, 0000000000000000
[  324.645885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
08:28:26 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000140))

08:28:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630040000000000e630c4000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0x0, 0xf02, 0x101, 0x7, 0xce})
r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={<r2=>0x0, 0x5}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0xffffffff, 0x1000}, &(0x7f0000000180)=0x8)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0xa0000, 0x0)

08:28:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000612000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:26 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  324.853103] binder: 14051:14058 unknown command 1073767173
[  324.867555] binder: 14051:14058 ioctl c0306201 20000000 returned -22
[  324.888371] binder: 14051:14058 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  324.904313] binder: 14051:14058 ioctl 401c5820 20000280 returned -22
[  324.913129] binder: BINDER_SET_CONTEXT_MGR already set
[  324.928943] binder: 14051:14062 unknown command 1073767173
[  324.941607] binder: 14051:14064 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  324.944821] binder: 14051:14058 ioctl 40046207 0 returned -16
[  324.963672] binder: 14051:14062 ioctl c0306201 20000000 returned -22
[  325.005056] binder: 14051:14058 ioctl 401c5820 20000280 returned -22
08:28:26 executing program 3:

08:28:26 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000812000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x18080)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440000000000e630c400000000091eae7e54d3fdf49405d56f86021de9d0fc8a23f9d25e9990aca516341f325dc628461b0f093adad14e101786efdb2f03319aa16a6f84d8bc4f8b6a29fa837c3df1e88ba59d4693a2c23ca56db0600bece0308707ead68ae9253c2a96f67482e7520145c6f5ae0ce682ff3a806f2dc9bb28566708488ce0990b29f1d6d680c4c39455bea461d56d7a39f637e86adf91fe7958d00000000000000"], 0x0, 0x0, 0x0})
ioctl$KDADDIO(r0, 0x4b34, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0xfffffcdd, 0x0, 0x0})
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080))
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
sendto(r1, &(0x7f0000000200)="418e188e5bba759cf053ea7b56f5266d07f0718580c6c7e65769f99ca31ea628a10242d2f37bd9fba1321d2d77e99329cf5ff497dbf97f25be1856cb8ca926e2b6b0dfd5d8fd89e76d09fb0c", 0x4c, 0x4044, &(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x3}}, 0x80)

08:28:26 executing program 2:

08:28:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x9, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1)
tee(r1, r0, 0x7, 0xa)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000400)={0x7, 0x7, 0xf5f1, 0x3b, [], [], [], 0x1, 0x5, 0x6, 0x457c78e8, "a463b879663bdf7cae55d880cc07a7ec"})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:26 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
socketpair(0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$KDMKTONE(r1, 0x4b30, 0x1a78000000000000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WMzU\xed\xbb\xc8\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x8f\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xb1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\x19sT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6d\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\xf7\xff\xff\xff\xff\xff\xff\xff\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\xa2\xda\xee,\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7\xd3\xa3\x98SVz\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xecv:\x1ba=\xd7G\xd5)\xeap\xef\x02\x98\xff\xf5f\x160\xb9\x9ay\xec\x82i\xaf\x9b\xe1x\xae\xca\x17\xfe\xfb\x14\xfd=\x00\x97Z\x99\x9dy\xba\x89M\xba\xe4\xc1\xa6\x06\x00\x00\x00\x00\x00\x00\x00x\"m\a\xe6:?E\x96~\x0e\xe8Y\xbbn\x0f<f\xe6\x8cDR\b\xbb2\xbb#B\x94\x8a\xa3\xf4\x13\xea\x98\x1d\xcfY\xc2s#\xf4\x94^2[\xa0\xe6\x9e\x01nUCj\x93$\xf5\xa4X\xc5\xac\xb6\x01\x10L\xf2\xfcz\xdcg\xa0f/T\x99\xdcOr\xfdM\x8fOh\xad]\xa5.\xd8\xc9\xad%\xdb\x88\xb09\x9eH4\xb3]O\xcf\xe8\xc5H\xeb5\xe3\xa1\xd0\x8c\a~}~\xa6\x1eq', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040))
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080))
dup3(r0, r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)

[  325.377898] binder: 14071:14077 ioctl 4b34 7 returned -22
[  325.393593] binder: BINDER_SET_CONTEXT_MGR already set
[  325.405541] binder: 14076:14081 ioctl 40046207 0 returned -16
[  325.413648] binder: 14071:14077 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 49df3f4de5e7ea91 != 0000000000000000
08:28:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000a12000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:26 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  325.442551] binder: BINDER_SET_CONTEXT_MGR already set
08:28:26 executing program 3:
clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48)
syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x0, 0x200000)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@ipv4={[], [], @broadcast}, 0x43})
exit(0xb0ffffff00000008)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180), 0xc)
request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)='GPL\x00', 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000004c0)=0x8)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz1'}, 0x4)

[  325.487729] binder: 14071:14077 ioctl c0306201 20008fd0 returned -14
[  325.506645] binder: 14076:14081 ioctl 40046207 0 returned -16
[  325.550428] binder: BINDER_SET_CONTEXT_MGR already set
08:28:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000c12000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x2}, 0x10)

[  325.578363] binder: 14071:14091 ioctl 40046207 0 returned -16
[  325.612439] binder: 14071:14077 ioctl 4b34 7 returned -22
08:28:26 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)

08:28:26 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  325.619909] binder: 14071:14091 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 49df3f4de5e7ea91 != 0000000000000000
[  325.696708] binder: 14071:14091 ioctl c0306201 20008fd0 returned -14
[  325.701126] binder: 14106:14112 unknown command 0
[  325.732260] binder: 14106:14112 ioctl c0306201 200001c0 returned -22
[  325.744690] binder: BINDER_SET_CONTEXT_MGR already set
08:28:27 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x2, 0xc)
write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0)
close(r1)

[  325.750205] net_ratelimit: 24 callbacks suppressed
[  325.750213] protocol 88fb is buggy, dev hsr_slave_0
[  325.750267] protocol 88fb is buggy, dev hsr_slave_1
[  325.768662] binder: 14106:14117 unknown command 0
08:28:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000040), 0x4000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:27 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  325.791850] binder: 14106:14117 ioctl c0306201 200001c0 returned -22
08:28:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000e12000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  325.840119] binder: 14106:14112 ioctl 40046207 0 returned -16
[  325.877983] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  325.881864] binder: BINDER_SET_CONTEXT_MGR already set
08:28:27 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
sysfs$2(0x2, 0x714, &(0x7f0000000040)=""/99)

[  325.921213] binder: 14124:14125 ioctl 40046207 0 returned -16
[  325.928385] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  326.003813] binder: BINDER_SET_CONTEXT_MGR already set
08:28:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0x0, 0x101, 0x26, 0x100000001, 0x8001, 0x8, 0x1f, 0x5, 0x3f, 0xf111, 0x94d, 0x7, 0x7}, {0x9, 0x101, 0x3ff, 0x1b, 0x6000000000, 0x1, 0xffffffffffffffc0, 0x4, 0xffffffff80000000, 0x7ff, 0x9, 0x100, 0x8001}, {0x9, 0x6, 0x7fffffff, 0x5, 0x1, 0x0, 0x4, 0x7, 0x7fffffff, 0x7, 0x40, 0x101, 0xd34f}], 0x5})
ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  326.027748] binder: 14139:14142 ioctl 40046207 0 returned -16
[  326.036358] binder: 14139:14145 Acquire 1 refcount change on invalid ref 0 ret -22
[  326.074865] protocol 88fb is buggy, dev hsr_slave_0
[  326.079998] protocol 88fb is buggy, dev hsr_slave_1
[  326.097527] binder: 14149:14151 ioctl 4070aea0 20000040 returned -22
[  326.133154] binder: 14149:14151 ioctl 80044323 20000100 returned -22
[  326.144018] binder: BINDER_SET_CONTEXT_MGR already set
[  326.157535] binder: 14149:14155 ioctl 4070aea0 20000040 returned -22
[  326.169363] binder: 14149:14151 ioctl 40046207 0 returned -16
[  326.170611] binder: 14149:14156 ioctl 80044323 20000100 returned -22
08:28:27 executing program 3:

08:28:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400001012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:27 executing program 2:

08:28:27 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x6, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={<r1=>0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x4}}, 0x7c5c3f13, 0x7f, 0x8000, 0x5, 0x80}, &(0x7f0000000040)=0x98)
pipe2(&(0x7f0000000240), 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x4, 0x1, [0x5]}, &(0x7f0000000200)=0xa)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:27 executing program 2:

08:28:27 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  326.469151] binder: BINDER_SET_CONTEXT_MGR already set
[  326.483228] binder: 14169:14170 ioctl 40046207 0 returned -16
[  326.483232] binder: BINDER_SET_CONTEXT_MGR already set
[  326.483271] binder: 14165:14172 ioctl 40046207 0 returned -16
08:28:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400006012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:27 executing program 3:

08:28:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
accept(r0, &(0x7f0000000040)=@l2, &(0x7f0000000100)=0x80)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:27 executing program 2:

[  326.595327] binder: 14165:14180 Acquire 1 refcount change on invalid ref 0 ret -22
[  326.634840] protocol 88fb is buggy, dev hsr_slave_0
[  326.639958] protocol 88fb is buggy, dev hsr_slave_1
08:28:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012020c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  326.698107] binder: BINDER_SET_CONTEXT_MGR already set
08:28:28 executing program 2:

08:28:28 executing program 3:

08:28:28 executing program 4:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304409c00000e63"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040))
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={<r3=>0x0, @in6={{0xa, 0x4e21, 0x81, @mcast1, 0xff}}}, &(0x7f0000000140)=0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0xfc00000000000000}, &(0x7f0000000300)=0x8)

[  326.753130] binder: 14190:14191 ioctl 40046207 0 returned -16
[  326.839066] binder: BINDER_SET_CONTEXT_MGR already set
08:28:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:28 executing program 2:

08:28:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:28 executing program 3:

[  326.894548] binder: 14204:14206 ioctl 40046207 0 returned -16
08:28:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012040c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  326.945779] protocol 88fb is buggy, dev hsr_slave_0
[  326.950881] protocol 88fb is buggy, dev hsr_slave_1
[  326.959974] binder: 14204:14210 Acquire 1 refcount change on invalid ref 234881180 ret -22
[  327.012816] binder: BINDER_SET_CONTEXT_MGR already set
08:28:28 executing program 2:

[  327.036608] binder: 14204:14210 unknown command 99
08:28:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:28 executing program 3:

[  327.069056] binder: 14215:14219 ioctl 40046207 0 returned -16
[  327.081088] binder: 14204:14210 ioctl c0306201 20000000 returned -22
08:28:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012060c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  327.156449] binder: 14204:14206 Acquire 1 refcount change on invalid ref 234881180 ret -22
[  327.215386] binder: 14204:14206 unknown command 99
[  327.253757] binder: 14204:14206 ioctl c0306201 20000000 returned -22
[  327.264863] protocol 88fb is buggy, dev hsr_slave_0
[  327.269970] protocol 88fb is buggy, dev hsr_slave_1
[  327.278880] binder: BINDER_SET_CONTEXT_MGR already set
[  327.284188] binder: 14240:14241 ioctl 40046207 0 returned -16
[  327.297660] binder: 14240:14241 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c09647eb2d7c0346306db373d234570d4e9c5ebe17ceeeaf714e92a4cd68d6f5181494b7df2caed18400d9885d02ffa4b3ea4ce75d9"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800)
r2 = creat(&(0x7f0000000640)='./file0\x00', 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000680)={0x6cf8, 0x3f715f7e, 0x2, @discrete={0x3, 0xfffffffffffffffb}})
r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001, 0x4010, r1, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20800, 0x40)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000240)={{0x3, 0x3, 0x1, 0x3, 0x3}, 0x81, 0x69704c59, 'id1\x00', 'timer0\x00', 0x0, 0xa891, 0x2, 0xffffffffffff4538, 0x8})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
write$selinux_attr(r2, &(0x7f00000006c0)='system_u:object_r:autofs_device_t:s0\x00', 0x25)
ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000180)=0x3ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x4}, @enter_looper, @free_buffer={0x40086303, r3}, @dead_binder_done], 0xffffffffffffff86, 0x0, 0x0})
sendmsg$tipc(r4, &(0x7f0000000600)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)="a1941b04857bb28268a0fc40ef7611a4185da4d96983abf07ee18719630c6e19f72e3919a9a1ffd32e1069b0f7076e682d6d2afa6fdcf834a0c8030d7b461e4b2b8ba0abd8cc2deee3c0e52372cc156e846bb30b9c1dcd2a9a0e955318850f7c885838c0599615279aad10b8aba8adb36e0c36cca06c62ebd12ed180f76f4f8ccffbd464bfa345b667ca534afa2d0d49fc76e6b200ffcae9415a4682a3eb984fb2808a77e76b47561a80d90149c3555c7331700e3773e923527fb446d0812680c1dc3357bf8cb88f2a6940db8fda35a0a63c8f9db78ed842de3c", 0xda}, {&(0x7f0000000340)="137dba2bd178b94cf6a2be722911095f111b360796a6100ac879a0e8e70f5d029b8f25344822040667ad838edfa1368319ad129780cacce1242c253e", 0x3c}], 0x2, &(0x7f0000000500)="0608ae73351617edf7770fee4bae7f2007f3c1ee32f577d54e9826a4374291f3cf401ebf377d11900e3793619c25014050922b778cd1b98d58d469fb086d7bb4d16773c39952cdc173985adffd2c28e7f7d55c6d2da4b0725c67c96a53cc4f57dbb2584c139541caac4d91b807978763cc482868b0f28b6d2422f88e27fe3690ebf6132434b409f770d3b4af2d3cc3708ee3ac38ddcd600457bdc8a065fecbcc36db956a0cb7403d32bf28c820f48d612621cea356dcf8d7852e0dbdc49cfa9738132ab1ed82b65ba67c9c88befd1770c15b7e10faab24e34ffb2ebb009e", 0xde, 0x4}, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:28 executing program 2:

08:28:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012080c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:28 executing program 3:

08:28:28 executing program 2:

08:28:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x81, 0x8, [0x8, 0x10001]})
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
read(r0, &(0x7f0000000200)=""/189, 0xbd)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004000000120a0c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  327.448720] binder: 14250:14251 unknown command 2120485132
08:28:28 executing program 3:

[  327.492787] binder: 14250:14257 ioctl c0306201 20000140 returned -14
[  327.515979] binder: BINDER_SET_CONTEXT_MGR already set
[  327.521305] binder: 14258:14259 ioctl 40046207 0 returned -16
[  327.525885] binder: 14250:14251 ioctl c0306201 200001c0 returned -22
08:28:28 executing program 2:

[  327.559607] binder_thread_write: 13 callbacks suppressed
[  327.559618] binder: 14250:14257 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  327.610878] binder: BINDER_SET_CONTEXT_MGR already set
08:28:28 executing program 3:

08:28:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004000000120c0c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  327.642213] binder: 14258:14267 ioctl 40046207 0 returned -16
[  327.649386] binder: 14250:14257 unknown command 2120485132
[  327.706003] binder: BINDER_SET_CONTEXT_MGR already set
[  327.706882] binder: 14250:14276 ioctl c0306201 20000140 returned -14
[  327.760698] binder: 14250:14251 ioctl 40046207 0 returned -16
[  327.760708] binder_release_work: 13 callbacks suppressed
[  327.760721] binder: undelivered death notification, 0000000000000000
[  327.784399] binder: 14250:14257 ioctl c0306201 200001c0 returned -22
08:28:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)="4b7102a5597a7fd73f5027c49a6ec3448155497f0a6b05709e26f71a7e5776b11ea9747ae949a1a1d957ada01d915799a0ecfcb0b2f1c978ba9c9c1c3c96d7110e9627a4810fa1979f82b6268fbef7cf40a10309110efe9a7192902ba615af9502e88c8e310414eeb06d15b7124366e8d398aee3", 0x74, 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r1, 0x8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffffffb, 0x28000)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={<r3=>0x0, 0x8, 0x30, 0x52f, 0x1}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x5, @mcast1, 0x5941}}}, 0x84)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:29 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:29 executing program 2:

08:28:29 executing program 3:

08:28:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8500000004000000120e0c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:29 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x1, 0x2)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40011)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x5, {{0xa, 0x4e23, 0x7, @loopback, 0x20}}}, 0x88)

[  327.828858] binder: 14250:14257 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:29 executing program 3:

[  327.903886] binder: undelivered death notification, 0000000000000000
08:28:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012100c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:29 executing program 2:

[  327.963883] binder: BINDER_SET_CONTEXT_MGR already set
[  327.979267] binder: 14284:14296 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:29 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  328.006320] binder: 14292:14293 ioctl 40046207 0 returned -16
[  328.038908] binder: BINDER_SET_CONTEXT_MGR already set
08:28:29 executing program 2:

08:28:29 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  328.058021] binder: 14284:14286 ioctl 40046207 0 returned -16
[  328.058301] binder: 14292:14293 Acquire 1 refcount change on invalid ref 0 ret -22
[  328.124924] binder: 14292:14299 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  328.162835] binder: 14292:14293 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  328.212342] binder: 14292:14299 Acquire 1 refcount change on invalid ref 0 ret -22
[  328.238296] binder: 14292:14315 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400, 0x0)
ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f0000000200)=""/24, 0xfffffffffffffffb})
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0xf2, 0x4)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x102, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012600c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:29 executing program 3:

08:28:29 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:29 executing program 2:

08:28:29 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  328.265807] binder: 14292:14299 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
08:28:29 executing program 2:

08:28:29 executing program 3:

[  328.341312] binder: undelivered death notification, 0000000000000000
08:28:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0200000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  328.401883] binder: BINDER_SET_CONTEXT_MGR already set
08:28:29 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  328.435684] binder: 14323:14325 ioctl 40046207 0 returned -16
[  328.437657] binder: 14323:14333 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  328.441710] binder: BINDER_SET_CONTEXT_MGR already set
08:28:29 executing program 2:

08:28:29 executing program 3:

[  328.488794] binder: 14330:14332 ioctl 40046207 0 returned -16
[  328.546723] binder: BINDER_SET_CONTEXT_MGR already set
[  328.574983] binder: 14330:14332 ioctl 40046207 0 returned -16
[  328.601701] binder: 14330:14337 Acquire 1 refcount change on invalid ref 0 ret -22
[  328.645716] binder: 14330:14340 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  328.663754] binder: undelivered death notification, 0000000000000000
08:28:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffffffff82f7, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000140)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x20)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400802, 0x0)
ioctl$RTC_WIE_ON(r2, 0x700f)

08:28:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0400000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:30 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
fadvise64(r0, 0x0, 0x8001, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:30 executing program 3:

08:28:30 executing program 2:

[  328.693787] binder: 14330:14337 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
08:28:30 executing program 2:

08:28:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  328.769411] binder: undelivered death notification, 0000000000000000
[  328.803600] binder: BINDER_SET_CONTEXT_MGR already set
08:28:30 executing program 3:

08:28:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0600000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  328.831227] binder: 14358:14360 ioctl 40046207 0 returned -16
[  328.831231] binder: BINDER_SET_CONTEXT_MGR already set
[  328.831260] binder: 14362:14363 ioctl 40046207 0 returned -16
[  328.916747] binder: BINDER_SET_CONTEXT_MGR already set
[  328.922062] binder: 14362:14363 ioctl 40046207 0 returned -16
08:28:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:30 executing program 2:

[  328.962066] binder: undelivered death notification, 0000000000000000
[  328.999613] binder: 14362:14366 Acquire 1 refcount change on invalid ref 0 ret -22
[  329.022832] binder: undelivered death notification, 0000000000000000
08:28:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63da1e68249b05c92fed9fd5e0da645a76350101b1008f7a96ba53d0d8dbd4a05a45b228f614065eae80acdbf9"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0800000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:30 executing program 3:

08:28:30 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="00e2ff00000000000000000000020000"], 0x0, 0x0, 0x0})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2c000, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:30 executing program 2:

08:28:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:30 executing program 3:

[  329.206212] binder: 14387:14391 unknown command 16769536
[  329.232441] binder: 14396:14397 unknown command 517628684
[  329.237561] binder: 14387:14391 ioctl c0306201 20000000 returned -22
08:28:30 executing program 2:

08:28:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0a00000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  329.262908] binder: 14396:14397 ioctl c0306201 200001c0 returned -22
[  329.309299] binder: BINDER_SET_CONTEXT_MGR already set
[  329.324031] binder: BINDER_SET_CONTEXT_MGR already set
[  329.345837] binder: 14387:14398 unknown command 16769536
[  329.353483] binder: 14396:14405 unknown command 517628684
08:28:30 executing program 3:

[  329.362876] binder: 14387:14391 ioctl 40046207 0 returned -16
[  329.394915] binder: 14396:14405 ioctl c0306201 200001c0 returned -22
[  329.396450] binder: 14396:14397 ioctl 40046207 0 returned -16
08:28:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0c00000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  329.413589] binder: 14387:14398 ioctl c0306201 20000000 returned -22
[  329.432556] binder: undelivered death notification, 0000000000000000
[  329.445530] binder: undelivered death notification, 0000000000000000
08:28:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6358a97f1d9ad95d5c3973fe6b77e5bc5e2a98599b4cd23da44ff65aecd8fb5983194225383e47136e4c012c17e95831b090da705ab1f26b0d82766c5d5493043a0ba2edc52f7a21ed28e57f5f2e7226c19697201a8e936e2291def62afd690f065783e1c5b8eae985868df66e28d65be0827fa2be5eec661fe0f77383b2f4bcbcaf07573bc70798ac6b3b"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0xffffffffffffff8c, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
sync_file_range(r0, 0x9, 0x10000000000003fd, 0x2000000000001)

08:28:30 executing program 2:

08:28:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:30 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
sync()
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e630c4000000000ded8af8853a8356e4e3387db5316a8d765476527d797e8a8ca1b96d04579ab59c26e317fe7b47f6daf8cf90466c032c30398c0926742424f3384af21a5598dd6d370ea38174731206ddeb17b49e2b4b970703d72105eaeb0cdfa29ccdc75d98eb9197ae83d0866605dd9445f8b7e3e5b5d95f2035af8b573d86740e53e6fb41a0d62d0f6fc22ceacad6735968453336798ffa1572902ed95350e3c16530545921a0e5f70a85acced472b89981b4fd538829c7b29710e4c1518eff2d1fdb4bc090b7941c060"], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:30 executing program 3:

08:28:30 executing program 2:

08:28:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0e00000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  329.625244] binder: 14428:14429 unknown command -1453825268
[  329.631007] binder: 14428:14429 ioctl c0306201 20000040 returned -22
[  329.639080] binder: BINDER_SET_CONTEXT_MGR already set
08:28:30 executing program 3:

08:28:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  329.670711] binder: 14431:14432 ioctl 40046207 0 returned -16
08:28:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c1000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  329.737970] binder: BINDER_SET_CONTEXT_MGR already set
08:28:31 executing program 2:

[  329.772488] binder: 14428:14441 unknown command -1453825268
[  329.795408] binder: 14428:14429 ioctl 40046207 0 returned -16
[  329.804893] binder: BINDER_SET_CONTEXT_MGR already set
[  329.813231] binder: 14431:14439 ioctl 40046207 0 returned -16
08:28:31 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  329.816365] binder: 14428:14441 ioctl c0306201 20000040 returned -22
[  329.862301] binder: BINDER_SET_CONTEXT_MGR already set
[  329.885434] binder: 14431:14432 ioctl 40046207 0 returned -16
[  329.885437] binder: BINDER_SET_CONTEXT_MGR already set
[  329.885454] binder: 14431:14450 ioctl 40046207 0 returned -16
08:28:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e728"], 0x0, 0x0, 0x0})
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x248000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c4800000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:31 executing program 3:

08:28:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0c639d9941eba47e879e1b83ad97695bcbbc9e746e2613299202617c7028791a0ef42fc8fb81ec57b31fe1621f2516cd4229ba6120597843283b580d9962551dd9b11265efe816de568e83c0ff1188e1a163b5834f74fb13dea3de51ee0fc48c029ac1112fdb4c9e8e1e6cc83569ed3a71b8917cf321322bd3ea190a800afc48db0d2ede432c340f45bba468ab81fc9b52f9abe5b8766973e9550e"], 0x0, 0x0, 0x0})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000240)=""/73, &(0x7f00000000c0)=0x49)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0xcd, 0x6}, 'syz1\x00', 0x4e})
getsockopt$inet_dccp_buf(r2, 0x21, 0xcc, &(0x7f0000000400)=""/4096, &(0x7f0000000040)=0x1000)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c6000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:31 executing program 2:

08:28:31 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:31 executing program 2:

08:28:31 executing program 3:

08:28:31 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  330.096561] binder: 14466:14467 unknown command -1717738740
[  330.114211] binder: BINDER_SET_CONTEXT_MGR already set
08:28:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000cf000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  330.152652] binder: 14469:14470 ioctl 40046207 0 returned -16
[  330.161611] binder: 14466:14467 ioctl c0306201 200001c0 returned -22
[  330.208590] binder: 14469:14475 unknown command 10471
[  330.222274] binder: 14469:14470 unknown command 1208771343
[  330.236154] binder: 14466:14474 unknown command -1717738740
[  330.241969] binder: 14466:14474 ioctl c0306201 200001c0 returned -22
08:28:31 executing program 3:

[  330.252627] binder: 14469:14470 ioctl c0306201 20008fd0 returned -22
[  330.265467] binder: 14469:14475 ioctl c0306201 200001c0 returned -22
[  330.280128] binder: BINDER_SET_CONTEXT_MGR already set
[  330.292892] binder: 14469:14470 ioctl 40046207 0 returned -16
08:28:31 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  330.305517] binder: 14469:14475 unknown command 10471
[  330.315342] binder: 14469:14475 ioctl c0306201 200001c0 returned -22
[  330.318683] binder: BINDER_SET_CONTEXT_MGR already set
[  330.343547] binder: 14466:14467 ioctl 40046207 0 returned -16
[  330.369047] binder: 14469:14485 Acquire 1 refcount change on invalid ref 0 ret -22
[  330.411041] binder: 14469:14470 unknown command 1208771343
[  330.448193] binder: 14469:14470 ioctl c0306201 20008fd0 returned -22
08:28:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x40)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000400)=""/211)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:31 executing program 2:

08:28:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c4201000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:31 executing program 3:

08:28:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c63f6c6034f440d90c3090f1025486bfe17bb25820f7da33e7de2a4c6e94cbcdb"], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={<r1=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}], 0x3f, 0x0, &(0x7f0000000140)="f3434208fb482176f9c2d25b383ba973345880cc61dae62af7d6255c930deeacae6d47985b05f1958fb9b414aec1e176b3a2246ba9e2ad05ebd81b550ab1de"})
syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x8, 0x82001)
openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x14000, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)=0x5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:31 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:31 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140))

[  330.538878] binder: 14499:14500 unknown command -956931316
[  330.545276] binder: 14499:14500 ioctl c0306201 200001c0 returned -22
08:28:31 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:31 executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0)

08:28:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0006000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  330.590744] binder: BINDER_SET_CONTEXT_MGR already set
[  330.602214] binder: 14499:14500 BC_FREE_BUFFER u0000000000000000 no match
[  330.667167] misc userio: Invalid payload size
[  330.675213] binder: 14506:14507 ioctl 40046207 0 returned -16
[  330.676095] binder: undelivered death notification, 0000000000000000
[  330.690774] binder: 14499:14508 ioctl 660c 0 returned -22
08:28:32 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
ptrace(0xffffffffffffffff, r2)
rename(0x0, &(0x7f0000000700)='./file0\x00')
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$getownex(r1, 0x10, &(0x7f0000000140))
getpgrp(0x0)
fcntl$getown(r0, 0x9)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_yield()
io_submit(0x0, 0x0, 0x0)

08:28:32 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  330.771157] binder: BINDER_SET_CONTEXT_MGR already set
[  330.784835] net_ratelimit: 18 callbacks suppressed
[  330.784843] protocol 88fb is buggy, dev hsr_slave_0
[  330.794922] protocol 88fb is buggy, dev hsr_slave_1
[  330.822440] binder: 14506:14507 ioctl 40046207 0 returned -16
08:28:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0cc6"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="00001e630c90000000da000000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f8ffffff00090000"], 0x0, 0x0, 0x0})
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x3ffd, 0x0)
ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))
ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000140))
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101001, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080))
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

08:28:32 executing program 3:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, 0x0)
clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005800)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @local}}}}, &(0x7f0000005900)=0xe8)
dup3(0xffffffffffffffff, r1, 0x80000)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r2}, 0x48)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@ipv4={[], [], @broadcast}, 0x43, r2})
exit(0xb0ffffff00000008)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180), 0xc)
r3 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)='GPL\x00', 0xffffffffffffffff)
keyctl$instantiate(0xc, r3, &(0x7f0000000280)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'GPL\x00'}, 0x2b, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000004c0)=0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz1'}, 0x4)

08:28:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c000a000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:32 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  331.012972] binder: BINDER_SET_CONTEXT_MGR already set
[  331.030060] binder: 14541:14544 ioctl 40046207 0 returned -16
[  331.041910] binder: 14541:14544 unknown command 50700
[  331.050330] binder: 14541:14544 ioctl c0306201 200001c0 returned -22
[  331.084029] binder: 14541:14544 unknown command 1662910464
[  331.090204] binder: 14541:14544 ioctl c0306201 20000000 returned -22
[  331.098773] binder: 14541:14544 unknown command -8
[  331.103929] binder: 14541:14544 ioctl c0306201 20008fd0 returned -22
[  331.104872] protocol 88fb is buggy, dev hsr_slave_0
[  331.112116] Unknown ioctl 21531
[  331.115551] protocol 88fb is buggy, dev hsr_slave_1
[  331.125843] Unknown ioctl 1074029064
[  331.130199] binder: BINDER_SET_CONTEXT_MGR already set
[  331.135947] binder: 14541:14544 ioctl 40046207 0 returned -16
[  331.139175] binder: 14541:14549 unknown command 50700
[  331.147363] binder: 14541:14549 ioctl c0306201 200001c0 returned -22
[  331.154070] binder: 14541:14544 unknown command 1662910464
[  331.157627] binder: 14541:14549 unknown command -8
[  331.163469] binder: 14541:14544 ioctl c0306201 20000000 returned -22
[  331.165174] binder: 14541:14549 ioctl c0306201 20008fd0 returned -22
[  331.178481] Unknown ioctl 1074029064
[  331.178569] Unknown ioctl 21531
[  331.327123] binder: BINDER_SET_CONTEXT_MGR already set
[  331.331288] binder: 14499:14551 unknown command -956931316
[  331.332587] binder: 14499:14508 ioctl 40046207 0 returned -16
[  331.338560] binder: 14499:14551 ioctl c0306201 200001c0 returned -22
[  331.354965] binder: 14499:14551 BC_FREE_BUFFER u0000000000000000 no match
08:28:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040))
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:32 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
ftruncate(r0, 0x7)

08:28:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c000c000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:32 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8000, 0x0)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x8010, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x14, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, r2, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  331.401357] binder: 14499:14552 ioctl 660c 0 returned -22
[  331.424883] protocol 88fb is buggy, dev hsr_slave_0
[  331.429969] protocol 88fb is buggy, dev hsr_slave_1
[  331.435159] protocol 88fb is buggy, dev hsr_slave_0
[  331.440556] protocol 88fb is buggy, dev hsr_slave_1
[  331.442491] binder: 14553:14554 ioctl 40087602 20000040 returned -22
[  331.463506] binder: BINDER_SET_CONTEXT_MGR already set
[  331.477770] binder: 14553:14562 ioctl 40087602 20000040 returned -22
[  331.486728] binder: 14556:14557 ioctl 40046207 0 returned -16
08:28:32 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:32 executing program 2:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x9, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1)
tee(r1, r0, 0x7, 0xa)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000400)={0x7, 0x7, 0xf5f1, 0x3b, [], [], [], 0x1, 0x5, 0x6, 0x457c78e8, "a463b879663bdf7cae55d880cc07a7ec"})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c000e000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  331.504940] binder: BINDER_SET_CONTEXT_MGR already set
[  331.523310] binder: 14553:14554 ioctl 40046207 0 returned -16
[  331.530084] binder: 14556:14557 BC_ACQUIRE_DONE u0000000000000000 no match
08:28:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563044000630c4000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/sequencer2\x00', 0x50001, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000003a00)=0x200, 0x4)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  331.598062] binder: 14556:14567 BC_ACQUIRE_DONE u0000000000000000 node 633 cookie mismatch 0000000000000002 != 0000000000000000
[  331.609868] binder: BINDER_SET_CONTEXT_MGR already set
[  331.631495] binder: 14573:14575 ioctl 40046207 0 returned -16
[  331.673670] binder: 14579:14581 Acquire 1 refcount change on invalid ref 1074553600 ret -22
[  331.707556] binder: 14579:14581 unknown command 0
[  331.732123] binder: 14579:14581 ioctl c0306201 20000000 returned -22
[  331.773935] binder: 14579:14585 Acquire 1 refcount change on invalid ref 1074553600 ret -22
[  331.784941] binder: BINDER_SET_CONTEXT_MGR already set
[  331.790919] binder: 14579:14585 unknown command 0
[  331.801098] binder: 14579:14585 ioctl c0306201 20000000 returned -22
[  331.802722] binder: 14579:14581 ioctl 40046207 0 returned -16
08:28:33 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0xfffffffffffeffff, 0xbd7f575e, 0x10000000001, 0x2, 0x1000000000c, @stepwise={{0x1, 0x6}, {0x6, 0x6}, {0x1, 0xfffffffffffffffb}}})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xa40, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0xab7b, 0x800, 0x4})

08:28:33 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c003f000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=ANY=[], 0xff68, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000100)={0x7, "3352ea9a497975b826234e10ebd132fd2a181c2bc9203714c8be416b6e5daa58", 0x3, 0x5, 0x3, 0x10003, 0x4000000, 0x2})

08:28:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0xc)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x8, &(0x7f0000000100)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0x2000000, 0x0, 0x0, 0x8, 0x0, r1, 0x0}])
r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1000, 0x40)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={<r5=>0x0, @in6={{0xa, 0x4e20, 0x3, @loopback, 0x1}}, 0x8000, 0x101}, &(0x7f0000000240)=0x90)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x4}, 0x8)

08:28:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6aaf"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  331.886759] binder: 14594:14595 unknown command 44906
[  331.892004] binder: BINDER_SET_CONTEXT_MGR already set
[  331.892020] binder: 14596:14603 ioctl 40046207 0 returned -16
[  331.892206] binder: 14596:14603 unknown command 0
08:28:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0142000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:33 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  331.959382] binder: 14596:14603 ioctl c0306201 200001c0 returned -22
[  331.969555] binder: 14594:14595 ioctl c0306201 200001c0 returned -22
[  331.984865] protocol 88fb is buggy, dev hsr_slave_0
[  331.985938] binder: 14594:14610 unknown command 44906
[  331.989947] protocol 88fb is buggy, dev hsr_slave_1
[  332.003356] binder: BINDER_SET_CONTEXT_MGR already set
[  332.013529] binder: 14594:14610 ioctl c0306201 200001c0 returned -22
[  332.029370] binder: 14594:14595 ioctl 40046207 0 returned -16
[  332.036277] binder: 14596:14605 unknown command 0
[  332.036803] binder: BINDER_SET_CONTEXT_MGR already set
08:28:33 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={<r1=>0x0, @in6={{0xa, 0x4e22, 0xea, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1f}}, 0x7fffffff, 0x80000000, 0x6, 0x40, 0x2}, &(0x7f0000000280)=0x98)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={<r2=>r1, 0xffffffffffff0001}, &(0x7f0000000580)=0xffffffffffffffb6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r2, 0xfffffffffffffffb, 0x2}, &(0x7f00000005c0)=0x6)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f00000007c0)=""/73, &(0x7f0000000940)=0x49)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000280)=ANY=[], 0x0)
r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x82000)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0xffffff86, 0x5, 0x0, {0x0, 0x0, 0x7e, 0x9}}, 0x30)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e21, @multicast2}, {0x306, @remote}, 0x60, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_team\x00'})
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x3, 0x4)
write$P9_RMKNOD(r3, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x44, 0x3, 0x2}}, 0x14)
r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000640)={0x0, 0xffffffffffffffb7, 0xfa00, {0x4, 0x0, 0x111, 0x1009}}, 0x2f7)
ftruncate(r4, 0x2)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x1a}, 0x7f}, @ib={0x1b, 0x1, 0x8, {"ee5bbcca1df3ecc275d3a5829545dd35"}, 0x7fffffff, 0xfffffffffffff26f}}}, 0x118)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000d80)={@in, 0x0, 0x8, 0x0, "4dbd3b0988e17b2d1d331c69872a9dda1d6a64edcd1cd30fb0ce73f1249d122559232b4970ee70afb23c5802edeb144bd80029d8a5754107cec75bbd53956c00"}, 0xd8)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10)
sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87de28601fcd3e9c61e1ae787808c2cf70f03c552d59ee51f1bf794f1ff60e385dacae0e9a37d5c56856b62a3ac4", 0x47, 0x4000010, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000240)="df", 0x1, 0x4200010, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x4, 0x2)

08:28:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c6558000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  332.063716] binder: 14596:14605 ioctl c0306201 200001c0 returned -22
[  332.142605] binder: 14596:14603 ioctl 40046207 0 returned -16
08:28:33 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="03630440000000000e630ce356c895a9"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3f, 0x81)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x117, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000100)=0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0})
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x111000)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0060000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0xc)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x8, &(0x7f0000000100)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0x2000000, 0x0, 0x0, 0x8, 0x0, r1, 0x0}])
r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1000, 0x40)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={<r5=>0x0, @in6={{0xa, 0x4e20, 0x3, @loopback, 0x1}}, 0x8000, 0x101}, &(0x7f0000000240)=0x90)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x4}, 0x8)

08:28:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c63d62581cb040923d2621a39e00b9946244dcbf3e8f5bb698979bc1ce3ae89bc2b1344e8fc4fc99c11a6977f92df97df15a1be18411324cb0ec19688b1d90f54387a5e316aa10f46299c044d4c33a3bd200e38a960ec0ae33d178319d8d8dd0e981baf"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  332.408455] binder: 14635:14636 unknown command 634807052
[  332.414141] binder: 14635:14636 ioctl c0306201 200001c0 returned -22
[  332.430556] binder: BINDER_SET_CONTEXT_MGR already set
[  332.465070] binder: 14635:14637 unknown command 634807052
[  332.479201] binder: BINDER_SET_CONTEXT_MGR already set
[  332.485123] binder: 14635:14636 ioctl 40046207 0 returned -16
[  332.500252] binder: 14635:14637 ioctl c0306201 200001c0 returned -22
[  332.509701] binder: 14639:14641 ioctl 40046207 0 returned -16
08:28:33 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c5865000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  332.527567] binder: 14639:14647 unknown command 217930508
[  332.533423] binder: 14639:14647 ioctl c0306201 200001c0 returned -22
08:28:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={<r2=>0x0, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x93f}, &(0x7f0000000200)=0x90)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={<r3=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r2, 0x0, 0x3, 0x6, 0x0, 0x7, 0x7fff, 0x5, {r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x7ff, 0x0, 0xfffffffffffffe00, 0xfffffffffffff001, 0x7}}, &(0x7f0000000400)=0xb0)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0xd, 0x0, 0x1, {0x0, 0x80000001, 0x6, 0x2}})

[  332.631669] binder: 14639:14641 unknown command 1074029315
[  332.674957] binder: 14639:14641 ioctl c0306201 20000000 returned -22
[  332.691920] binder: 14639:14641 unknown command 0
[  332.697271] binder: 14639:14641 ioctl c0306201 20008fd0 returned -22
[  332.706048] binder: 14639:14647 unknown command 217930508
[  332.711617] binder: 14639:14647 ioctl c0306201 200001c0 returned -22
08:28:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0081000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:34 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x406, r1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
r4 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x40, 0x40)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r4}}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000240)=@sha1={0x1, "5be8828ee56b4d1db0989f345a1e771d0c599bb4"}, 0x15, 0x3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000480)=0x1)
r7 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x7, 0x420100)
write$P9_RSETATTR(r7, &(0x7f0000000240)={0x7}, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet6(0xa, 0x40000080806, 0x0)
io_setup(0xffffffffffff0000, &(0x7f0000000200)=<r9=>0x0)
pipe(&(0x7f00000002c0)={<r10=>0xffffffffffffffff})
ioctl$KDMKTONE(r10, 0x4b30, 0x8319)
io_getevents(r9, 0x8001, 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000280)={0x0, 0x989680})
setsockopt$inet_buf(r6, 0x0, 0x9, &(0x7f0000000e80)="d79055c05ae9c765039f60b3c33e5f95534b66201a92de680f0c079c9cd030d725acef5a2eeff4530d12b7b44ac5cb26a70b432e367ef171a7bb87ca050e299eada9fe3ae208bddad0ccc214c688d0a6ec433fb97675da5ab56cafc4d06f9657c98d4f0cbc84b54cc0867594ea1e629b19a2193c10d048a26e09ff8165c22376fad0ca0df5a37869f6b5fcd2649e329a3647bea161e4fcd50a9efd7495a335c7e3739acf40339e08f66b6dfd445e7372f0925d076b63696205e4d461d67df4f499ace4e4e3bf86dbb0d9d48476567694c103f2082cf79389b6a2734b4226f03d88be11280db78a13726090708436841fb89cc9363af7d556224e20d1d4dda3937192d498c4fbf1f78c6bdc277ca98026147576e909cb048faec97f4696a69fe75e9e9bf671e39071df32d2a01c305d9fd75975e0267bb7a47e6a156ca5dce5884fafd0e3b56a5582dd965d6c1f08935f8c6fa513aa510de163ad4a3c56", 0x15d)
bind$inet6(r8, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r8, 0xfffffffffffffffe)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @ipv4={[], [], @empty}, 0x80000001}, 0x1c)
syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2)
socket$inet6(0xa, 0x6, 0x0)
mq_open(&(0x7f00000000c0)='bdev\\\x00', 0x40, 0x40, &(0x7f0000000100)={0x9, 0xfff, 0x0, 0x100, 0x6, 0x3, 0xb555, 0x3})
ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000140)={0xa, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})

08:28:34 executing program 2:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x8000, 0x0)
ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x1, 0x0, 0x1, {0x0, 0x99, 0x0, 0x1}})
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x0, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000580)={<r2=>0xffffffffffffffff}, 0x84000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x101000, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000002c0)={0x1ee5, 0x7ff, 0x600000000000000})
stat(0x0, &(0x7f0000000300))
ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000440))
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x40)
r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={<r7=>0x0, 0x3, 0x8a92}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e22, 0x2, @mcast2, 0xc12f}}, 0x800, 0x5, 0x9, 0x10001, 0x9}, &(0x7f0000000280)=0x98)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc)

[  332.750519] binder: 14639:14641 unknown command 1074029315
08:28:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  332.809443] binder: 14639:14671 unknown command 0
[  332.809643] binder: 14639:14641 ioctl c0306201 20000000 returned -22
[  332.814340] binder: 14639:14671 ioctl c0306201 20008fd0 returned -22
[  332.814459] binder: BINDER_SET_CONTEXT_MGR already set
[  332.882961] binder: 14666:14675 Acquire 1 refcount change on invalid ref 0 ret -22
[  332.882992] binder_thread_write: 15 callbacks suppressed
[  332.883004] binder: 14666:14675 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  332.883187] binder: 14666:14675 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  332.884110] binder: 14666:14667 ioctl 40046207 0 returned -16
[  332.891725] binder: 14666:14675 Acquire 1 refcount change on invalid ref 0 ret -22
[  332.891752] binder: 14666:14675 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  332.891976] binder: 14666:14676 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="77f7576a87ad71870f58f3"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00f0000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x0, 0xf0)

08:28:34 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  333.098045] binder: BINDER_SET_CONTEXT_MGR already set
08:28:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0002000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  333.141204] binder: 14683:14684 ioctl 40046207 0 returned -16
[  333.142338] binder_release_work: 8 callbacks suppressed
[  333.142346] binder: undelivered death notification, 0000000000000000
[  333.149442] binder: BINDER_SET_CONTEXT_MGR already set
08:28:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaadd7, 0x0, 0x0, 0x181)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xa00, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f0000000000)='./file0\x00', r3}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

08:28:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x103000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x6, 0x3, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  333.265209] binder: 14693:14694 ioctl 40046207 0 returned -16
[  333.275529] binder: undelivered death notification, 0000000000000000
08:28:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  333.386682] binder: undelivered death notification, 0000000000000000
[  333.432732] binder: BINDER_SET_CONTEXT_MGR already set
08:28:34 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x101005, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e})
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x9, 0x1000, 0xffffffffffffffd6, 0xfffffffffffffffb, 0x6, 0x5, 0x7})
lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x72411fbca3c1f46)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000)=0x3f, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')

08:28:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0004000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:34 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8c63bbafef59a5977a8da3ea3df637ba82d9bb70a32e284ba24a17f04d7955890be3f630d62844fcffff9e2e48ebff47748861e749f0a2fb0dc72008005ae5a824f9794e8077c566"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000100)=""/124)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  333.462820] binder: 14713:14714 ioctl 40046207 0 returned -16
08:28:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0006000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  333.509021] binder: 14726:14727 unknown command -1346673780
[  333.543714] binder: 14726:14727 ioctl c0306201 200001c0 returned -22
08:28:34 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
close(r2)

[  333.614270] binder: BINDER_SET_CONTEXT_MGR already set
[  333.648949] binder: 14726:14734 unknown command -1346673780
08:28:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  333.676052] binder: 14726:14727 ioctl 40046207 0 returned -16
[  333.676075] binder: 14726:14742 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  333.689189] binder: BINDER_SET_CONTEXT_MGR already set
[  333.694511] binder: 14739:14740 ioctl 40046207 0 returned -16
[  333.704440] binder: 14726:14734 ioctl c0306201 200001c0 returned -22
08:28:35 executing program 2:
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x2, {0x2}}, 0x24)

[  333.746712] binder: undelivered death notification, 0000000000000000
[  333.779310] binder: 14739:14740 Acquire 1 refcount change on invalid ref 0 ret -22
[  333.835447] binder: 14739:14754 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  333.842503] binder: 14739:14740 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  333.919334] binder: 14739:14754 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:35 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, &(0x7f0000000000)={'syz'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0008000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:35 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:35 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00\x86o\x9br\xcc&p:4\x96\x1dn\x17B\x00\xbccT\x8c\f2b\xd8\x80\xf8\x19\tq>\x95\x04\xd2io\t\xbb\x14\xd5o\xa8\x92\t\xe2\x9a\x9d\x8e\xb4\xc8\x7f\x00\x00\x00cU)\xae\x8f<Y\t\xb9@R\x1az\x16\x8f|\x02\x17\xa8\xe2\\\xa5\xbf\x8b\xeb!@\x84\x96KDb~\xe7t\x96C\x96\x80\xae\x88\xa8\x04\x8d\f\x9d\x0e\x96\x14\xd7:\xc7Ex$\x1c\xd6\xcc\xb1\x86\xa5\xbb~\xa3+\xf9\xf3\xf8F\xdf\xf5xE\xa5\xc3\xac\x92\x8fZ\x1cqv\xc6W\xcc[\xc9\'\x92\xfc\xf2\xbf\xef\xe0\xca\xf4\xb0\x81\x881@\xb7,\xa7+3\xed]4\xa2\x87%wxqfg\x11\xe2G\'s\x1c#K\b;\xf7P\x9d\xf1\xa3\v\xac\xa9\xe8`\x10\x1bF\xa7\x93\f\xda\xb9 0\x16\xc0\xda\xfb\v\xd5Q\x84\v\x9e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x1)

08:28:35 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000bd000000000018001fa00000000000009500000000000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000)="fa74e51bbb36637aa3a4679874c8e7c34ab2dc546ec484f987c97d1a8531085e35accbd8c3d3706e130e95b12b540a1c91285868149a673383ed83904b6c324c8af01bb134d316a69d3c730d6ac152024b74cfbe280352e1cf4b004ef5a9c4157b947c68109948a1d0b7561f0a3d0b1ba83cb25ad4aba0637d52e79dc41e4e473da7ee2ca60d3e8e4328782e2b6bc9b86858e0cf96df83e020c4229f424f19b46a184393e0019b080fac7f2b34c45145a3e52f", &(0x7f00000000c0)="5cf1172500c8a50c3227de11b1c60435b7a68f6b6a1d71d85da932bfb20dd9c4ab09f7d96057c98c2f8499ec3002306d07057e1318a34a10d9bb36280d6cb2eaf199b774a782d36a8b29a027fcd75de35d093316debe5b63a2f4df7a66634bc85230e6a1feca51c5488d86b5a72824fc1f5cff0e7b2561a2bb0e97077e3c7f86d2ce70f28c60703a4aa6772bf9db30d27549e88600f2dfc02e2d7efb83071a8714f8ab3815e3a143a479f449c2fb9ecc782d915055fdf5a2009c", 0x2}, 0x20)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x7, 0x3ff, 0x8, 0x8000, 0x9, 0x9, 0x5, 0x9, 0x0, 0x2, 0x404, 0xffffffffffffffc1, 0x7fffffff}, {0x9, 0x3f, 0x8000, 0x9ed, 0x1, 0x100000001, 0x100000000, 0x4, 0x6, 0x63, 0x8, 0x11, 0x40}, {0x3, 0x3ff, 0x6, 0x3f, 0xffffffffffffff5e, 0x6, 0xd266, 0xbd, 0x6, 0x6, 0x80, 0x7, 0x20}], 0x8000})
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000200))

08:28:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8, 0x2)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x9, 0x4)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x9, 0x9})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)

08:28:35 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  334.255326] binder: BINDER_SET_CONTEXT_MGR already set
[  334.291381] binder: 14770:14772 ioctl 40046207 0 returned -16
[  334.298449] binder: undelivered death notification, 0000000000000000
08:28:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c000a000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:35 executing program 2:
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={<r1=>0x0, 0x852, 0x3, [0x7, 0x0, 0x100]}, &(0x7f00000000c0)=0xe)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x11}, &(0x7f0000000140)=0x8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000001c0)={0x2, 0x4440e8aa, 0x7, 'queue0\x00', 0x4})
getsockopt$sock_int(r2, 0x1, 0x30, 0x0, &(0x7f0000000940))

08:28:35 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x0, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r2 = dup2(r1, r0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$BLKRRPART(r2, 0x125f, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r3=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @random="56b4a5f58b00"}, 0x14)
sendmmsg$inet_sctp(r2, &(0x7f0000001980), 0x4924af2, 0x0)
write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'team_slave_0\x00'}], 0xa, "0cfee46f6680932e7e7c6c6e570681857fd6269be619509c45815b9d087126eaa38a818a7358db6d157993b89ed15d2bfd3cca8b35b349db59ccd695b633c246843a9be6cb60094972464fcc95b1b7a2e267cff680c292fd3aa77fa08f742e0918b5872caf235234ac30691a22c49c860c2d571e53215603025ad49a7c34d2afd02def46f2e5ab66c150d567c95bb01584c283a794e16a5ed854a1dd1f73bb0d27"}, 0xba)
socket$vsock_dgram(0x28, 0x2, 0x0)

[  334.326439] binder: undelivered death notification, 0000000000000000
[  334.337943] binder: BINDER_SET_CONTEXT_MGR already set
[  334.380529] binder: BINDER_SET_CONTEXT_MGR already set
[  334.388724] binder: 14775:14776 ioctl 40046207 0 returned -16
08:28:35 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  334.444301] binder: 14770:14797 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  334.444656] binder: 14770:14772 ioctl 40046207 0 returned -16
[  334.472891] binder: undelivered death notification, 0000000000000000
08:28:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c000c000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  334.493897] binder: 14770:14796 Acquire 1 refcount change on invalid ref 0 ret -22
[  334.573178] binder: 14770:14796 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
08:28:35 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80000001, 0x8000)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x81}, 0x10)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:35 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
read(r0, 0x0, 0xfffffe1c)
write$binfmt_elf64(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="7f634c4701000400000000000000009e1713ae60ca0000000000000000e4ff00020000ddff17b7074db0"], 0x2a)

08:28:35 executing program 4:
r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)="d0c8e0453eeb7d6e2fab3ee45c6a2751bb3f2b004d1c64d7474ac1d3bc14308f7d47b0547832fba276a257f96cecd7c6abdb235d70a31df098d1b045cd64a0bf1b0d", 0x42, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x40820)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[0x3, 0xffffffff, 0x81]})

08:28:35 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c000e000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:36 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  334.691858] binder: undelivered death notification, 0000000000000000
[  334.712272] binder: BINDER_SET_CONTEXT_MGR already set
08:28:36 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x4012}, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000280)={<r1=>0x0, <r2=>0x0})
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000200)={{}, {r1, r2+30000000}}, 0x0)
tkill(r0, 0x1000000000016)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0)
ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000002c0)={0x5, "ca87bd08db23ee2e02ac964d83d13ce165f07fbc7b74f9b820c818494b58008b", 0x7, 0x100, 0x10001, 0x1, 0x4, 0x3, 0xfffffffffffffffc, 0xff})

08:28:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0010000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  334.742256] binder: 14819:14821 ioctl 40046207 0 returned -16
[  334.748417] binder: BINDER_SET_CONTEXT_MGR already set
08:28:36 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  334.782624] binder: 14814:14822 ioctl 40046207 0 returned -16
[  334.811206] binder: 14819:14821 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0060000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x117, 0x1008}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  334.880788] binder: 14819:14831 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:36 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4b2000, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080))
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)=<r3=>0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000780)={&(0x7f0000000700)=""/115, 0x20a000, 0x800, 0xffffffff7fffffff}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000006c0)=0x4010, 0x4)
r7 = getgid()
getgroups(0x9, &(0x7f0000000600)=[0x0, 0xee01, 0xee01, <r8=>0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0x0, 0xee00])
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x4}, [{0x2, 0x2, r2}, {0x2, 0x2, r3}], {0x4, 0x3}, [{0x8, 0x1, r4}, {0x8, 0x3, r5}, {0x8, 0x4, r6}, {0x8, 0x0, r7}, {0x8, 0x4, r8}], {0x10, 0x5}, {0x20, 0x2}}, 0x5c, 0x1)

08:28:36 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  334.944475] binder: undelivered death notification, 0000000000000000
[  334.983068] binder: BINDER_SET_CONTEXT_MGR already set
[  335.009468] binder: BINDER_SET_CONTEXT_MGR already set
[  335.022145] binder: 14843:14844 ioctl 40046207 0 returned -16
[  335.041925] binder: 14848:14851 ioctl 40046207 0 returned -16
[  335.061416] binder: 14848:14851 Acquire 1 refcount change on invalid ref 0 ret -22
[  335.085520] binder: 14848:14855 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:36 executing program 2:
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000140)={r2, 0x7f, 0x100, "90e23eea947ed43ca356233ef0f9646fd15496adf793c6319dc8e3962cb3811e0958f9e29fd71cce62e923150b17cd83ff975ad396928fe043e8915e54c23e82083772403520a0933837c98a478121dc04d7b05b5b97258810e09b13b9472ba5302cf5a1a197577a212906a562ec510a52eea62d7e8cff5ccac096b5aab94af8ea0075bd7d1573ab22d6"})
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
write$apparmor_current(r0, &(0x7f0000000080)=@profile={'stack ', '&&useruser\x00'}, 0x9)

08:28:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00f0000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x5d, 0x0, &(0x7f0000000100)="9df91a2625b248d622c5f6a54c8c4e9ac9b9b53d88f6efeda6531ff424a4d4e3dad17bcaf3cc97927deb5561626eb0c8a97b315ef3b9cf77e1fc80226089563da40a1ea6703c5de9c906dd19dad4f4d65059efd94cc168351f206ca44c"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x6, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:36 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:36 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x200480, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000001f630c4000000000067f9b6b2e9a449a35114ba3f96221c830090f824433da1344863e551d923f65787d995d37b19a126e100021a832b051615e"], 0x0, 0x0, 0x0})
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x20, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  335.507905] binder: BINDER_SET_CONTEXT_MGR already set
[  335.526293] binder: 14869:14871 ioctl 40046207 0 returned -16
[  335.545986] binder: undelivered death notification, 0000000000000000
[  335.553826] binder: 14869:14871 unknown command 1074553631
[  335.562250] binder: 14869:14871 ioctl c0306201 20000000 returned -22
[  335.583669] binder: 14869:14871 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  335.605769] binder: BINDER_SET_CONTEXT_MGR already set
[  335.618631] binder: 14869:14879 unknown command 1074553631
[  335.621346] binder: 14869:14880 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  335.632808] binder: 14869:14871 ioctl 40046207 0 returned -16
[  335.632864] binder: 14869:14879 ioctl c0306201 20000000 returned -22
[  336.144847] net_ratelimit: 22 callbacks suppressed
[  336.144856] protocol 88fb is buggy, dev hsr_slave_0
[  336.154975] protocol 88fb is buggy, dev hsr_slave_1
[  336.295211] binder: BINDER_SET_CONTEXT_MGR already set
[  336.300543] binder: 14867:14875 ioctl 40046207 0 returned -16
[  336.464859] protocol 88fb is buggy, dev hsr_slave_0
[  336.469933] protocol 88fb is buggy, dev hsr_slave_1
[  337.024884] protocol 88fb is buggy, dev hsr_slave_0
[  337.030021] protocol 88fb is buggy, dev hsr_slave_1
[  337.344910] protocol 88fb is buggy, dev hsr_slave_0
[  337.350041] protocol 88fb is buggy, dev hsr_slave_1
[  337.664874] protocol 88fb is buggy, dev hsr_slave_0
[  337.670034] protocol 88fb is buggy, dev hsr_slave_1
08:28:39 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff80cffffdfffe2e0a0000000c000300ff0700007d0a00010c000200170022ff02f102f0"], 0x2c}}, 0x0)

08:28:39 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0042010e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:39 executing program 2:
pipe(0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001a00)='cgroup.events\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a40)='./file0/file0\x00', 0x40, 0xbf)
write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESOCT], @ANYRES32, @ANYRESDEC], 0x18)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x6)
pipe(0x0)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x0, @loopback}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @dev}, 'rose0\x00'})
r2 = memfd_create(&(0x7f0000000080)='\x00', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x100f}}, 0x20)
clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x0, 0xffffffffffffffc0, 0x4000000000000, 0x8, 0x1a, 0xbf8, 0x100000001, 0x7, 0x4, 0x8, 0xe8, 0xd5})
fcntl$setown(r2, 0x8, 0x0)
sendmsg(r1, &(0x7f0000001980)={&(0x7f0000000200)=@rc={0x1f, {0x87, 0x98, 0x2, 0x0, 0x4e9, 0x9}, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)="58155f692ed93668ed8190a7a7c7072b9e0c2af03746db1fab49c552b55cb0be7c5ed44014b2ef4307125ef9866c3129645e2984280cb00d8008da96beebcb8dbeaeaa21699ca0d9f44b70ebd8d8f6ecbf12fb34bef3699029a053695c2e71158acc2c12f70f85109bad32b48e18ddfda0317e21e4343035aff32a4410950fefe27f45ddb797aeceacad65fdf27af5329854d7c46b70000c8ce9677edea9a3cf1f39e8b8635a05dcc2d88457028640565d5bc506b7ac4bcfcd6a1741ebd2404113c90e071cc0c2ef080479a092e5", 0xce}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000280)="4b763710803c8963d0f22e4110a1f071dc410f5b1509d844e723aa905b929fa6da941addca027ca3711ba8edccd91533ae0d0f6c903b5d5e", 0x38}, {&(0x7f0000000540)="25ee1c7faa6965624629d0d5bf6a180f893b3391b3f9b60b528a887fca6a869da49cef897cdba107a6430ffb77f55faa1d2a20d7e55db3d67e487452332808542fcbf19c9f9efbb216b018bb51b1aeefb6579f200a128af1bf1985850a4073f4eb1a93dc93d2799a6c561bf56b375513b082b0ad3ab02cb3723d56fd541a77cca6e01bd91dce5e5d23151974d715131d63716a357946aae484f638d8b89e6fc47cdf957692824ff7", 0xa8}, {&(0x7f0000000600)="e8eaabb1e5ecc36e7f33cdc7f2c8ade82d41abfa78dd5ab2159b1cf7551515d23672658c68e019f715cab79154eea82e0a361136ef20bc05d489c6b3067acc1615642d4fa2883aff62bfe0c24c7e38d0df3f7cf672aa740c2f738e7413c619db0a2bc9584c93f82f5e9373776d7e06ebbfddc3e3b9a16e70618d77c577df26b4f247e7c4ec8105e97ec77793acb2d80c85", 0x91}, {&(0x7f00000006c0)="3c49a8e549b412379cbf4a61883c96ca3487b103bf30bcb7825c2d7b129367aa8486df16b42cdb22a63245768004622a340507", 0x33}, {&(0x7f0000000700)="742a4309284aadafae124be9a7eb235c7d25da2f8489d0d13e6bc059ab2289a6d850c6d345863952acb49bacb523676001d8eb32a013f7bb05e2c2502dd45bc53bb76036f12f7e78aba6d8e5db81c0d7a62b525982faf04614cb6d628d13234b741700be7c6ce070f909120788d48f158dd2eb", 0x73}, {&(0x7f0000000780)="81090fb43c8fab8e75284b21302ed38d2174dfbee4a0f2e3fffc9fb060af9adecea602cb3847c26ff8a8a8bf55b6c8dc4d6c4f98db34b9e067a90aab87edbb904f90cff125ca435fe13dcf86208de8fef8da6b91544814a58f585b927077b555aff727f7200822bd18f8c1", 0x6b}], 0x8, &(0x7f0000000880)=[{0xb8, 0x117, 0x0, "31ae28961efeab2c023a7dac7633c0ba70caade3e67531bbc540ea8a00cfd0f491042e147cd1861924c2a30e593076097ed1811054a322a4d7bcf9d9939a8b4b48c228a18a6676eb01d8ea019b6bf34bd52d79ebf29805b8251e372ffacedce309682d3ed624b751e69ab5cebf565a9588bc71045a9e90b07f4f0bbde0714e7d6630f2aad13a16d7f043f683176d8471be4ed6bf7156e123c5231f79d4301c242220f778"}, {0x1010, 0x114, 0xba, "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"}], 0x10c8}, 0x24008800)
execveat(r2, &(0x7f00000019c0)='./file0\x00', 0x0, 0x0, 0x1000)
unshare(0x40000000)
ioctl(0xffffffffffffffff, 0x0, 0x0)

08:28:39 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c63c8a617b444f1fdbe1ccfc3802f44a6ed9074a4b2504ce5c5df4d194994d88fca5826b24798a7f0f7229678f5ba4d9a90f7f3c8f3db6f48c3ce9fc6b23e56072b61538fd850a1a0f8749101b4b094869aa285641c41358315c6e730b191356a9e5cc6f281ff4c8eaaab9ed4d1d56ad8ff0776b7150df538b3529993ef5f6c08dd77333b5eef05c4c3ac0000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x3ff, 0x1, 0x2, 0xffffffffffffffff}, 0x10)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x20002, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x245, 0x7, 0xff, 0x28, 0x6, 0x5, 0x8})

08:28:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  337.845936] binder: BINDER_SET_CONTEXT_MGR already set
08:28:39 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  337.884032] binder: 14892:14893 ioctl 40046207 0 returned -16
[  337.900596] binder: 14897:14899 unknown command -1496816884
[  337.907589] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
08:28:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000060e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  337.950268] binder: 14897:14899 ioctl c0306201 200001c0 returned -22
[  337.952337] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
08:28:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/vcs\x00', 0x100, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0ce3"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000003c00), &(0x7f0000003b80)=0x14)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000003bc0)={'gretap0\x00', {0x2, 0x4e21, @loopback}})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003b40)='/dev/hwrng\x00', 0x200000, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000003c40)={0x30000001, 0x492d, 0x21})
recvmmsg(0xffffffffffffffff, &(0x7f0000003900)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f0000000300)=""/26, 0x1a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001500)=""/184, 0xb8}, 0x3}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003840)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/211, 0xd3}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/195, 0xc3}], 0x4, &(0x7f0000003880)=""/72, 0x48}, 0xd9}], 0x2, 0x1, &(0x7f0000003980))
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000003a00)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000003b00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x68, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x40094)

[  337.995601] binder: 14897:14904 unknown command -1496816884
[  338.012536] binder: 14897:14904 ioctl c0306201 200001c0 returned -22
[  338.021432] IPVS: ftp: loaded support on port[0] = 21
[  338.048173] binder: BINDER_SET_CONTEXT_MGR already set
08:28:39 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  338.069650] binder: 14897:14899 ioctl 40046207 0 returned -16
[  338.070125] binder_thread_write: 11 callbacks suppressed
[  338.070139] binder: 14897:14913 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  338.089553] binder: BINDER_SET_CONTEXT_MGR already set
[  338.120313] binder: 14909:14911 ioctl 40046207 0 returned -16
[  338.120369] binder: 14909:14918 unknown command 58124
[  338.154280] binder: 14909:14918 ioctl c0306201 200001c0 returned -22
08:28:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00000a0e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:39 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={<r2=>0x0, 0xd8, "6bc764d8dc52a409c6620790aee8589bdc224ef4168ea4d3fac22ddf80c40e7234cb7dea0c983dc711d1373daf6781d7532a501931d7f8d130785d77dd78e686dd913d06627f0f468a938386333786a1ee3010e8e375048d0e8f06056d442d3f6e83a886b4904710ba9310b5fc0e77d0443c2692013b264f44c03847a8b781fcf2bfbe64f656f5ca4bbc343220d361c872963aebcb3ceb3151051a58f770ca9fcae46be95b0d334e4d0e29ed7c44b9bff90ee1999e138879a2c993c4d07356d34c119dcca7d5d6c3b4881d7541f4420e18f1a1add92e4535"}, &(0x7f0000000240)=0xe0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r2, 0x0, 0x6, 0xfd2, 0x1f, 0x3}, &(0x7f00000002c0)=0x14)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="cd76f9ab0019d388ded248e8d0f4c3ea151663c1e4fbc6b5354b4d6ca6395822f856cbc9d921d3fb82f0bee1bdfcff0bf4f028f431f77ae539384a60a0", 0x3d)

[  338.184097] binder_release_work: 2 callbacks suppressed
[  338.184106] binder: undelivered death notification, 0000000000000000
[  338.216639] binder: 14909:14924 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:39 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  338.239182] binder: 14909:14911 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  338.283655] binder: 14909:14924 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  338.317203] binder: 14897:14912 Acquire 1 refcount change on invalid ref 0 ret -22
08:28:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00000c0e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:39 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  338.372937] binder: 14897:14912 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  338.387126] binder: 14909:14918 unknown command 58124
[  338.446929] binder: 14909:14918 ioctl c0306201 200001c0 returned -22
[  338.507867] binder: undelivered death notification, 0000000000000000
08:28:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt(r0, 0x2, 0x0, &(0x7f0000000100)="21520e5c08206208dd51fc9fd259df3aef52a24d655e91c568ef31dbf7212fa08ddc6aa91ca47cdf4088f72d81643ebfad00f79462d564c4707f567f7d43a2dc87734cd7e7e71650322b02a69af359d5e9a776e9cdcd15074a0949411090c2e0e9212509f04dbafe91c1f3003a743737ab9af8b379c1a46d522fdb2a6de5e6c6d514b4d2702d33964a0400f07d86c920bb3465e81466a3699070445ba04b2487fa06fe9a40a5ebbac13a26a498de4df85157382484", 0xb5)
request_key(0x0, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0xbd7, 0x1, 0x0, 0x0, 0x20, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfff, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0xfff, 0x9, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80000000, 0x40, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x41}, 0x0, 0x0, 0x0, 0x5, 0xdfa2, 0x0, 0x575e}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
bind$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10)
recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x10000000}}], 0x1, 0x0, 0x0)

08:28:40 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x600000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x4)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0xc000)
r3 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x14}, @in6=@rand_addr="10798f9b2090c48920e2393b496736b5", 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0xa0, 0xef, 0x0, r3}, {0x8, 0x7, 0x0, 0x6, 0x0, 0x1, 0x0, 0x400}, {0xfffffffffffffff9, 0x0, 0x7}, 0x2db, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x101, 0x0}, 0x0, 0x1, 0x3, 0x3, 0x7, 0x9, 0x669f810f}}, 0xe8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={<r4=>0x0, 0x5}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={r4, 0x0, &(0x7f00000003c0)}, &(0x7f0000000440)=0x10)
connect(r2, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x80)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000280)={0x3, 0x5, 0xffffffffffffff12})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={r2, r2, 0xf, 0x2}, 0x10)
r5 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000080))
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000640)=ANY=[@ANYRESOCT])
r6 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
ftruncate(r6, 0x1000000)
fremovexattr(r2, &(0x7f00000002c0)=@random={'system.', '[ppp1#^.wlan0B\x00'})
sendfile(r5, r6, &(0x7f00000000c0), 0xeffffdef)
close(r5)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
ioctl$TIOCSCTTY(r5, 0x540e, 0x40)
getpid()
r7 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f63fff9d0890000"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)

[  338.718030] IPVS: ftp: loaded support on port[0] = 21
08:28:40 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
sched_getaffinity(r1, 0x8, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="419c3812b5978c4191e588330724f118951bb597b3f6077bc4ae21d0671ada9119a1452b3f95c0dd340f10eac40600000000000000a17db7e1947d040014f265826dcfe72b70b5bb72f0578d5fa4aab91c069d397090e8001d14b76a3d56e5004da432d87dbd7ba65d9772ca9d8764417f0f69f5b6486f711a0eb1f89b8e2e07b98ded417b676e61aa3e45a5c886ff0000"], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380))
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10011, r0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={<r3=>r2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="076304400400000003630840", @ANYRES64=r3, @ANYBLOB="0c63000006630440030000001063084002008f81ca40fa9e200000000000001063000010d4ca4003"], 0xd1, 0x0, &(0x7f0000000400)="f908913ce727e02fd6377c0e80584bf83ed0f05a3064da39f1cd26c86f9ad9773229beb4b40ff0f38e83c07218e946396620b4fb5fc965701c35985a830c9b3b99e45ff78dfced871baa50bbdaa85fc2201daeb0a050e7d54cfeb23de8f4c03cdd0f32e0992319aa61c804aa4c87988101f883ad2e522bc56e3bd66409c76f70c8f510a5db615eb0999128e0bde978cb388ba04c11ae375a40d04bf7d8d7e90df1ac6e55f4cc9895a1a0d631bd05449685988f83c5bd1d114bbf01a1cd1da6779b425581bf9dec7c41b953ce286abf3af8"})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
uname(&(0x7f0000000240)=""/78)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000300)={0x9, <r5=>0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000340)={r5, 0x4})
fstat(r0, &(0x7f0000000500))

08:28:40 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/vcs\x00', 0x100, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0ce3"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000003c00), &(0x7f0000003b80)=0x14)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000003bc0)={'gretap0\x00', {0x2, 0x4e21, @loopback}})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003b40)='/dev/hwrng\x00', 0x200000, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000003c40)={0x30000001, 0x492d, 0x21})
recvmmsg(0xffffffffffffffff, &(0x7f0000003900)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f0000000300)=""/26, 0x1a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001500)=""/184, 0xb8}, 0x3}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003840)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/211, 0xd3}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/195, 0xc3}], 0x4, &(0x7f0000003880)=""/72, 0x48}, 0xd9}], 0x2, 0x1, &(0x7f0000003980))
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000003a00)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000003b00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x68, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x40094)

08:28:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00000e0e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  338.776416] binder: 14958:14959 unknown command 58124
[  338.786763] binder: 14956:14957 unknown command 524288
[  338.811383] binder: 14956:14957 ioctl c0306201 20000000 returned -22
08:28:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00003f0e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  338.834383] binder: 14958:14959 ioctl c0306201 200001c0 returned -22
[  338.851994] binder: 14956:14957 unknown command 305699905
[  338.860859] binder: undelivered death notification, 0000000000000000
08:28:40 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  338.879548] binder: 14954:14970 unknown command 1953719052
[  338.907389] binder: 14954:14970 ioctl c0306201 200001c0 returned -22
[  338.916670] binder: 14956:14969 DecRefs 0 refcount change on invalid ref 4 ret -22
[  338.933030] binder: 14954:14970 unknown command -100703473
[  338.943811] binder: 14956:14957 ioctl c0306201 20008fd0 returned -22
08:28:40 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0xfffffffb}], 0x1, 0x0, 0xfffffffffffffdea}, 0x0)

[  338.965718] binder: 14954:14970 ioctl c0306201 20008fd0 returned -22
[  338.991889] binder: 14956:14969 BC_FREE_BUFFER u0000000000000000 no match
08:28:40 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000080)=0x80)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000001c0))
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1800010}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r1, 0x420, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x4000000)
write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7}, 0x7)
close(r0)

08:28:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0001420e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:40 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  339.022530] binder: 14956:14969 Release 1 refcount change on invalid ref 3 ret -22
[  339.058667] binder: 14956:14969 BC_DEAD_BINDER_DONE 9efa40ca818f0002 not found
[  339.093912] binder: 14956:14969 unknown command 32
[  339.107880] binder: 14956:14969 ioctl c0306201 20000100 returned -22
[  339.142825] binder: BINDER_SET_CONTEXT_MGR already set
08:28:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0065580e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  339.163759] binder: 14956:14969 unknown command 775250700
[  339.191338] binder: 14956:14980 unknown command 524288
[  339.194454] binder: 14956:14957 ioctl 40046207 0 returned -16
[  339.202703] binder: 14956:14969 ioctl c0306201 200001c0 returned -22
[  339.227760] binder: 14956:14980 ioctl c0306201 20000000 returned -22
[  339.235295] binder: 14956:14969 unknown command 305699905
[  339.250425] binder: 14956:14969 ioctl c0306201 20008fd0 returned -22
[  339.267999] binder: 14956:14969 DecRefs 0 refcount change on invalid ref 4 ret -22
[  339.282787] binder: 14956:14969 BC_FREE_BUFFER u0000000000000000 no match
[  339.293916] binder: 14956:14969 Release 1 refcount change on invalid ref 3 ret -22
[  339.304958] binder: 14956:14969 BC_DEAD_BINDER_DONE 9efa40ca818f0002 not found
[  339.312706] binder: 14956:14969 unknown command 32
[  339.318588] binder: 14956:14969 ioctl c0306201 20000100 returned -22
[  339.591415] binder: 14954:14977 unknown command 1953719052
[  339.605537] binder: BINDER_SET_CONTEXT_MGR already set
[  339.618011] binder: 14954:14977 ioctl c0306201 200001c0 returned -22
[  339.632393] binder: 14954:14970 ioctl 40046207 0 returned -16
08:28:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={<r1=>0x0, 0x13, "fd8877343935db63935ea2fbfde95c231c767a"}, &(0x7f0000000100)=0x1b)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x5, 0x3, 0x40}, 0xfd55)
r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0xffffffffffffff7f, 0x7fb58722, 0x3, 0x1}, {0x0, 0xb2, 0x7000000000000000, 0x4}, {0xa5, 0xfffffffffffffffa, 0x37, 0x101}, {0xedb, 0x3f, 0x6, 0x7}, {0x4f4, 0x1, 0x40, 0x7fffffff}, {0x8, 0x1f, 0x7fffffff, 0x800}, {0x1, 0x3, 0x3, 0xbb}]}, 0x10)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/176, &(0x7f0000000280)=0xb0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

08:28:40 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000600e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:40 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x17, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400102, 0x28)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000000c0)={0x3, 0x7, 0xc0b, 0x2}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  339.654864] binder: 14954:15001 unknown command -100703473
[  339.660529] binder: 14954:15001 ioctl c0306201 20008fd0 returned -22
[  339.712120] binder: 15002:15003 unknown command 808464432
[  339.734130] binder: 15002:15003 ioctl c0306201 200001c0 returned -22
[  339.744208] binder: BINDER_SET_CONTEXT_MGR already set
08:28:41 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0058650e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  339.758197] binder: 15009:15010 ioctl 40046207 0 returned -16
[  339.775922] binder: BINDER_SET_CONTEXT_MGR already set
[  339.789106] binder: 15009:15011 ioctl 40046207 0 returned -16
[  339.795329] binder: 15002:15003 unknown command 3
[  339.800358] binder: 15002:15003 ioctl c0306201 20008fd0 returned -22
[  339.819611] binder: undelivered death notification, 0000000000000000
[  339.828753] binder: undelivered death notification, 0000000000000000
[  339.859801] binder: 15002:15012 unknown command 808464432
08:28:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={<r1=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, r1, 0x4}, @clear_death={0x400c630f, 0x4, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b394c7aa19271c3fc582271cf2fbb1"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x10}]]}}}]}, 0x3c}}, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x81, 0x19, 0x1, 0x2, "dd72677ec9e37dd1f8dc973ccd55a979fbd7bfcd95ccc7e083fd7e9fb45df108"})
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x401)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000080)=""/61)

[  339.887745] binder: 15002:15012 ioctl c0306201 200001c0 returned -22
[  339.903178] binder: BINDER_SET_CONTEXT_MGR already set
[  339.955262] binder: 15002:15026 unknown command 3
[  339.982891] binder: 15002:15003 ioctl 40046207 0 returned -16
[  340.001982] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[  340.015109] binder: 15002:15019 Acquire 1 refcount change on invalid ref 0 ret -22
[  340.023292] binder: 15023:15028 BC_INCREFS_DONE u0000000000000000 node 693 cookie mismatch 0000000000000004 != 0000000000000000
[  340.034089] binder: 15002:15026 ioctl c0306201 20008fd0 returned -22
[  340.047880] binder: 15002:15019 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  340.058881] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[  340.085309] binder: 15023:15031 unknown command -1429760845
[  340.091674] binder: 15023:15028 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4
[  340.102879] binder: 15023:15031 ioctl c0306201 20008fd0 returned -22
[  340.112026] binder: BINDER_SET_CONTEXT_MGR already set
[  340.118410] binder: 15023:15028 ioctl 40046207 0 returned -16
[  340.124505] binder: 15023:15035 BC_INCREFS_DONE u0000000000000000 no match
[  340.132454] binder: 15023:15035 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4
[  340.143426] binder: 15023:15028 unknown command -1429760845
[  340.150252] binder: 15023:15028 ioctl c0306201 20008fd0 returned -22
08:28:41 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010"], 0x5}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10009, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4)

08:28:41 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000810e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:41 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="00000000000000000000000400000000"], 0x0, 0x0, 0x0})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="29a28f9c01b480d958a09e48d9198081cf881d3fade626245ff75ff63260656618a15b7705ba8dba")
r2 = inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x1000000)
inotify_rm_watch(r0, r2)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x100, 0x9, 0x3, 0x0, 0x2, 0x2, 0x6, 0x0, 0x20, 0x6})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:41 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x21, 0x4, 0xfffffffffffffffd)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x1da)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100), 0x4)
sendmmsg(r0, &(0x7f0000000a40), 0x400000000000030, 0x0)
poll(&(0x7f0000000040)=[{r1, 0x8424}], 0x1, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x100)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=<r5=>0x0)
write$P9_RSTATu(r2, &(0x7f0000000440)={0x7a, 0x7d, 0x2, {{0x0, 0x5f, 0x0, 0x1ff, {0x40, 0x3, 0x4}, 0x1000000, 0xffff, 0x4, 0x1, 0x0, '', 0x13, 'md5sumsystem%\\ppp1{', 0x1, '\\', 0x18, '[posix_acl_accessdvmnet1'}, 0x6, 'wlan1\'', r3, r4, r5}}, 0x7a)
getsockname$packet(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x14)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000004c0)={0x1, 0x0, 0x102, 0x3, {0x100, 0x88c, 0x5, 0x76b}})

[  340.231568] binder: 15039:15045 unknown command 0
08:28:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
prctl$PR_SVE_GET_VL(0x33, 0x4504)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:41 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  340.276141] binder: 15039:15045 ioctl c0306201 20000000 returned -22
[  340.298323] binder: 15039:15045 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000f00e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  340.345877] binder: 15039:15049 unknown command 0
[  340.381206] binder: BINDER_SET_CONTEXT_MGR already set
[  340.383746] binder: 15039:15049 ioctl c0306201 20000000 returned -22
[  340.388007] binder: 15039:15058 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:41 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000080)={0xce, 0x7, 0x2f2b})
readv(r0, &(0x7f0000000140), 0x1000000000000101)
syz_open_dev$mouse(0x0, 0xa34, 0x2)

[  340.423438] binder: 15053:15056 ioctl 40046207 0 returned -16
[  340.423749] binder: BINDER_SET_CONTEXT_MGR already set
08:28:41 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000020e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  340.499747] input: syz1 as /devices/virtual/input/input8
[  340.517915] binder: 15039:15045 ioctl 40046207 0 returned -16
[  340.518547] binder: BINDER_SET_CONTEXT_MGR already set
[  340.569966] binder: 15053:15065 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  340.595353] binder: 15053:15056 ioctl 40046207 0 returned -16
[  340.611753] binder: undelivered death notification, 0000000000000000
08:28:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000040e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:42 executing program 3:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f0000720000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil)
r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000)
recvmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/166, 0xa6}, {&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000280)=""/224, 0xe0}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/48, 0x30}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/116, 0x74}], 0xa, &(0x7f0000000800)=""/32, 0x20}, 0x10022)
madvise(&(0x7f00007fb000/0x2000)=nil, 0x2000, 0xf)
madvise(&(0x7f00007bc000/0x4000)=nil, 0x4000, 0x8)
getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000880), &(0x7f00000008c0)=0x4)

08:28:42 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x100, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000380)=0x4)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070")
pkey_alloc(0x0, 0x3)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @multicast2}, 0x4}}}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
setpriority(0x0, r1, 0x10000)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0)
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="e9a5c0ec02146688dc6037b44615ece052e74e003011dac59d23b031a2461f17f61735d776de880570e8146a9e7f4ca479534206b6f1", 0x36, 0xfffffffffffffff8)
r3 = add_key(&(0x7f0000000100)='id_resolver\x00', 0x0, &(0x7f0000000540)="c9c2e2890c3df639d788dfe331cc9d6bf64396f9417e802a410df49e956465d3f6696ba62f7183db593b08aba06f0d34a034e9c925a561c08d3853cb71a56fb8ff68565d8ffcb82b4d0c814ab06fbc3a26424264b8af22bbe8c70a414b9b61ec069d3eafbb02686f96958ad384b73e19373df01ed5b2ec5c2c", 0x79, 0xfffffffffffffffe)
keyctl$reject(0x13, r2, 0x86, 0x80000001, r3)
clone(0x2102001dfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=[0x0, &(0x7f0000000400)='security.capa%ility\x00'], 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c4000eeff00"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:42 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000060e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000080e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:42 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  341.178157] binder: BINDER_SET_CONTEXT_MGR already set
[  341.184836] net_ratelimit: 18 callbacks suppressed
[  341.184844] protocol 88fb is buggy, dev hsr_slave_0
[  341.194939] protocol 88fb is buggy, dev hsr_slave_1
[  341.242125] binder: undelivered death notification, 0000000000000000
[  341.250526] binder: 15087:15094 ioctl 40046207 0 returned -16
[  341.270858] binder: BINDER_SET_CONTEXT_MGR already set
08:28:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1)
r1 = open(0x0, 0x20000, 0x4)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000280))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff)
getresuid(&(0x7f0000000240)=<r3=>0x0, 0x0, &(0x7f00000002c0))
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x101000, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={@remote, 0x4c, r4})
ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x0, 0x320]}, 0x2c)
r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x84ea, 0x0)
ioctl$RTC_WIE_OFF(r1, 0x7010)
ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000180)=0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="59cc8ee6e8e1164f1c10fcad86dd6006f52600081100257b00ef00f40004000000000000000000000000ff0200000000000000000000000000010000000000089078"], 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in=@remote, 0x4e21, 0x100000000, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x67, r4, r3}, {0x4, 0x2, 0x1, 0x0, 0x0, 0x7fffffff, 0xcfa9, 0x55d5}, {0x0, 0x40, 0x80000001, 0xfff}, 0xc9, 0x6e6bbc, 0x1, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x4d2}, 0xa, @in=@multicast1, 0x3501, 0x3, 0x3, 0x2000000000000000, 0x10000, 0x0, 0x8}}, 0xe8)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x57, 0x4, 0x0, {0x800, 0x9}, {0x8001, 0xfffffffffffffffc}, @period={0x5f, 0x4, 0x100, 0x6, 0xbc78, {0x3, 0x5, 0x7ff, 0x6}, 0x0, &(0x7f0000000100)}})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'ip6gre0\x00', @remote})
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff})

[  341.304722] binder: 15095:15095 ioctl 40046207 0 returned -16
[  341.311434] binder: BINDER_SET_CONTEXT_MGR already set
[  341.336914] binder: 15087:15094 ioctl 40046207 0 returned -16
08:28:42 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:42 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080))

08:28:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00000a0e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

08:28:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c63355180142e367d54ad9cdd80927791839fa6c3aebc37743a31ee8c157de5fbc8f50dbd1358737c431acfa2c69644e7b31d23a64af2492430ee21886ee796ca5fc0fa870d45c92ad6a9dd299f127c538ff97a30fe9e9327df2252a95dca176dcc6ab377805772c0a491483330ddfc854ca35d40f153ae96e142958a0cede453748cefc1812cdedac0b5cd8a1c0dd0bc3521403f168a4fbfa6873bd43e714a78b105124e3b6261e8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0xfffffffffffffc89, 0x0, &(0x7f0000000200)=[@dead_binder_done={0x40086310, 0x2}, @release={0x40046306, 0x2}, @dead_binder_done={0x40086310, 0x3}, @dead_binder_done={0x40086310, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@fda={0x66646185, 0x5, 0x2, 0x23}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000040), 0x0, 0x0, 0x23}], &(0x7f0000000080)=[0x40]}}], 0x15d, 0x0, 0x0})
r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x400, 0x200000)
faccessat(r1, &(0x7f0000000180)='./file0\x00', 0x10, 0x400)

08:28:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x100, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000380)=0x4)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070")
pkey_alloc(0x0, 0x3)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @multicast2}, 0x4}}}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
setpriority(0x0, r1, 0x10000)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0)
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="e9a5c0ec02146688dc6037b44615ece052e74e003011dac59d23b031a2461f17f61735d776de880570e8146a9e7f4ca479534206b6f1", 0x36, 0xfffffffffffffff8)
r3 = add_key(&(0x7f0000000100)='id_resolver\x00', 0x0, &(0x7f0000000540)="c9c2e2890c3df639d788dfe331cc9d6bf64396f9417e802a410df49e956465d3f6696ba62f7183db593b08aba06f0d34a034e9c925a561c08d3853cb71a56fb8ff68565d8ffcb82b4d0c814ab06fbc3a26424264b8af22bbe8c70a414b9b61ec069d3eafbb02686f96958ad384b73e19373df01ed5b2ec5c2c", 0x79, 0xfffffffffffffffe)
keyctl$reject(0x13, r2, 0x86, 0x80000001, r3)
clone(0x2102001dfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=[0x0, &(0x7f0000000400)='security.capa%ility\x00'], 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:42 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  341.514871] protocol 88fb is buggy, dev hsr_slave_0
[  341.519973] protocol 88fb is buggy, dev hsr_slave_1
[  341.541896] binder: BINDER_SET_CONTEXT_MGR already set
[  341.573067] binder: 15122:15125 ioctl 40046207 0 returned -16
[  341.580050] binder: BINDER_SET_CONTEXT_MGR already set
08:28:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00000c0e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  341.632023] binder: 15128:15130 ioctl 40046207 0 returned -16
[  341.632540] binder: 15128:15138 unknown command 1362453260
[  341.645167] binder: BINDER_SET_CONTEXT_MGR already set
[  341.664012] binder: BINDER_SET_CONTEXT_MGR already set
[  341.674947] binder: 15132:15133 ioctl 40046207 0 returned -16
08:28:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0xfffffffffffffffd)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x2, 0x2, 0x1, 0xc0})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r2, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="b9800000c00f3235000100000f300f01c83e0ff382610000008f68e4a20f0cf3abf044804304f4450f01cab900010040b8245cb3bcba08bfe5370f300f986706b9800000c00f3235000100000f30", 0x4e}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  341.681160] binder: 15122:15125 ioctl 40046207 0 returned -16
08:28:43 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  341.733490] binder: 15128:15138 ioctl c0306201 200001c0 returned -22
[  341.735867] binder: 15128:15130 ioctl c0306201 20008fd0 returned -14
08:28:43 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
iopl(0x9)

08:28:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c00000e0e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  341.824862] protocol 88fb is buggy, dev hsr_slave_0
[  341.829954] protocol 88fb is buggy, dev hsr_slave_1
[  341.835162] protocol 88fb is buggy, dev hsr_slave_0
[  341.840236] protocol 88fb is buggy, dev hsr_slave_1
08:28:43 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:43 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xaf, 0xa100)
mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x20, 0x7)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)
clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000180)=ANY=[@ANYBLOB="152f666930000000"], &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0)
gettid()

08:28:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000100e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  341.918362] binder: undelivered death notification, 0000000000000000
[  341.922608] binder: BINDER_SET_CONTEXT_MGR already set
[  341.958018] binder: 15158:15160 ioctl 40046207 0 returned -16
[  342.001135] binder: BINDER_SET_CONTEXT_MGR already set
[  342.008837] binder: 15128:15138 unknown command 1362453260
[  342.014490] binder: 15128:15138 ioctl c0306201 200001c0 returned -22
08:28:43 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  342.049645] binder: 15158:15160 ioctl 40046207 0 returned -16
[  342.057986] binder: 15128:15145 ioctl c0306201 20008fd0 returned -14
[  342.069848] binder: undelivered death notification, 0000000000000000
[  342.099418] binder: BINDER_SET_CONTEXT_MGR already set
[  342.104723] binder: 15128:15130 ioctl 40046207 0 returned -16
08:28:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = msgget(0x3, 0x5)
getresuid(&(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100), &(0x7f0000000140))
r3 = getegid()
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000300)=0xc)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=<r6=>0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000380)=<r7=>0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x2, r2, r3, r4, r5, 0x8, 0x9}, 0x1009f1ac, 0x10001, 0x8, 0x0, 0x3ff, 0xfffffffffffffff9, r6, r7})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:43 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x7)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x400200220200, 0x0)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000002c0)=0x1c)
socket$inet(0x2, 0xe, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0\x00')
socket$inet6(0xa, 0x0, 0x7)
perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00'})
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, &(0x7f0000001200)=0x10228)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, &(0x7f0000000580))
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=<r3=>0x0)
r4 = syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/user\x00')
ioctl$VT_RELDISP(r4, 0xb701)
r5 = creat(&(0x7f0000001140)='./file0\x00', 0x0)
r6 = accept4$tipc(r5, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800)
getsockname(r6, &(0x7f0000000140)=@ax25={{0x3, @null}, [@remote, @null, @bcast, @bcast, @null, @default, @remote, @bcast]}, &(0x7f00000000c0)=0x80)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)

08:28:43 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
signalfd(r0, &(0x7f0000000040)={0x569}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630c4000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r1=>0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r2=>0x0)
setpgid(r1, r2)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000400)=""/249)
pipe2$9p(&(0x7f0000000080), 0x800)

08:28:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000600e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}}, 0x0)

[  342.316475] binder: BINDER_SET_CONTEXT_MGR already set
[  342.361631] binder: 15188:15189 ioctl 40046207 0 returned -16
[  342.384896] protocol 88fb is buggy, dev hsr_slave_0
[  342.389978] protocol 88fb is buggy, dev hsr_slave_1
[  342.395896] Unknown ioctl 35123
[  342.401939] binder: 15188:15189 unknown command 1074553606
[  342.414493] binder: BINDER_SET_CONTEXT_MGR already set
[  342.439816] binder: 15188:15189 ioctl c0306201 20008fd0 returned -22
[  342.449947] binder: 15194:15198 ioctl 40046207 0 returned -16
[  342.481950] binder: undelivered death notification, 0000000000000000
[  342.494517] Unknown ioctl 35123
[  342.499425] binder: 15188:15189 ioctl 80404508 20000400 returned -22
[  342.520329] binder: BINDER_SET_CONTEXT_MGR already set
[  342.541664] binder: BINDER_SET_CONTEXT_MGR already set
[  342.548336] binder: 15188:15189 ioctl 40046207 0 returned -16
[  342.567010] binder: 15194:15198 ioctl 40046207 0 returned -16
[  342.574419] binder: 15188:15206 unknown command 1074553606
[  342.587689] binder: 15188:15206 ioctl c0306201 20008fd0 returned -22
[  342.604558] binder: 15188:15189 ioctl 80404508 20000400 returned -22
08:28:44 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x40003e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x14, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

08:28:44 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x2}}, 0x0)

08:28:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x7)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x400200220200, 0x0)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f00000002c0)=0x1c)
socket$inet(0x2, 0xe, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0\x00')
socket$inet6(0xa, 0x0, 0x7)
perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00'})
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, &(0x7f0000001200)=0x10228)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, &(0x7f0000000580))
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=<r3=>0x0)
r4 = syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/user\x00')
ioctl$VT_RELDISP(r4, 0xb701)
r5 = creat(&(0x7f0000001140)='./file0\x00', 0x0)
r6 = accept4$tipc(r5, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800)
getsockname(r6, &(0x7f0000000140)=@ax25={{0x3, @null}, [@remote, @null, @bcast, @bcast, @null, @default, @remote, @bcast]}, &(0x7f00000000c0)=0x80)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20)

08:28:44 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={<r1=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x68, 0x20, &(0x7f0000000140)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x1, 0x19}, @flat={0x776a2a85, 0x100, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000100), 0x1, 0x2, 0x22}], &(0x7f0000000200)=[0x40, 0x40, 0x0, 0x38]}, 0x7}}], 0x37, 0x0, &(0x7f0000000300)="348cff06754accb3071519f4c2964b32f3b161ea0c0e1eb838baf55f02c90ac133684085380860810d972b3f6bdaf2f042914a3261225d"})
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x1, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x3ab3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  343.265096] binder: BINDER_SET_CONTEXT_MGR already set
[  343.281390] binder: BINDER_SET_CONTEXT_MGR already set
[  343.287255] binder: 15216:15218 ioctl 40046207 0 returned -16
08:28:44 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x3}}, 0x0)

[  343.310506] binder: 15220:15221 ioctl 40046207 0 returned -16
[  343.314465] binder: 15216:15223 got transaction to invalid handle
[  343.324111] Unknown ioctl 35123
[  343.329913] binder: 15216:15223 transaction failed 29201/-22, size 104-32 line 2896
08:28:44 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffffc)
ioctl(r0, 0xffffffffffffffff, &(0x7f0000000000)="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")
clone(0xffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9)
r1 = getpgrp(0xffffffffffffffff)
getpgrp(r1)

[  343.410297] binder: BINDER_SET_CONTEXT_MGR already set
[  343.431539] binder: 15216:15236 got transaction to invalid handle
[  343.474818] binder: 15220:15226 ioctl 40046207 0 returned -16
[  343.481895] binder: 15216:15242 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  343.508053] binder_thread_write: 5 callbacks suppressed
[  343.508067] binder: 15220:15221 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:44 executing program 3:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0)
poll(&(0x7f0000000340)=[{r0, 0x550}, {r1}], 0x2, 0x0)

08:28:44 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:44 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000100))
sendto$inet6(r0, &(0x7f0000000540)="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", 0x1000, 0x40000, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth1\x00', @ifru_hwaddr=@dev={[], 0x17}}})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x88001, 0x0)
futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0x7530}})
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_vs\x00')
ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000080)={0x200, &(0x7f0000000380)="31be6b26f40a7b60dd16ede6b05a7516c12c5747e89cf7c309f1894d66bb0aa2e178b210f8059fea424badc414d06d54809b0821353978f97e7121ef0669e42008c74725631bae3c4e7ef7a5a05f7a8b8afedea26716996aab0ceb324f9f4067b9c51adaac6f400847a9a5aedcb4a6a74965ad16fc94681bfb3f6d4230df05b423ff71254e488649ee5465de2d776ee261a8a80e4fd778e417f49fbfb771908459e1ba2c9bb0c4a478a21d4039faaa011f95b65c3348c0f5d6e06bd8bbf2456519566e5b22e8fb7407df9dc239e28c4715b3c4e03df7094d7644064055ce035878e1522d0c5f76b1f423ccd4e2d9e221b255ebce23f06440363c62dc1196a41b8345fbb7af3e395d81a0bb18fdf4e419d3631188b1b744fdfce1ab06644ef612f748c16a30f604485ac0aa137be7aca5b0f0b88b63e21c8777ea1c0131740041b3cc81bc8c7772ed"})

08:28:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x8}}, 0x0)

[  343.526983] binder: BINDER_SET_CONTEXT_MGR already set
[  343.532312] binder: 15216:15218 ioctl 40046207 0 returned -16
[  343.532323] binder: undelivered TRANSACTION_ERROR: 29201
[  343.549521] binder_release_work: 1 callbacks suppressed
[  343.549527] binder: undelivered death notification, 0000000000000000
[  343.562035] binder: 15216:15236 transaction failed 29201/-22, size 104-32 line 2896
[  343.614976] binder: undelivered death notification, 0000000000000000
08:28:45 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@increfs={0x40046304, 0x3}, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  343.666100] binder: undelivered TRANSACTION_ERROR: 29201
08:28:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0xf}}, 0x0)

08:28:45 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffffa9, 0x0, &(0x7f0000005fd4)=[@release={0x40046306, 0x3}, @acquire={0x400c630e}], 0x22f, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f0000000100)=0x4)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:45 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  343.852285] binder: BINDER_SET_CONTEXT_MGR already set
08:28:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x0)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8042, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000140), 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000000000), 0x200000fffc)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

[  343.879052] binder: 15266:15268 ioctl 40046207 0 returned -16
[  343.879056] binder: BINDER_SET_CONTEXT_MGR already set
[  343.879069] binder: 15267:15269 ioctl 40046207 0 returned -16
[  343.895466] binder: 15266:15268 IncRefs 0 refcount change on invalid ref 3 ret -22
08:28:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0xc0}}, 0x0)

08:28:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x81, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0), 0x1e6)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)

[  343.950917] binder: 15266:15268 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  343.957705] binder: 15267:15269 ioctl c0306201 20000000 returned -14
08:28:45 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  343.995674] binder: 15266:15277 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  344.021906] binder: BINDER_SET_CONTEXT_MGR already set
[  344.023484] binder: 15266:15277 IncRefs 0 refcount change on invalid ref 3 ret -22
[  344.039551] binder: 15267:15276 unknown command 0
[  344.069481] binder: 15267:15276 ioctl c0306201 20008fd0 returned -22
[  344.083286] binder: 15266:15277 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  344.109445] binder: 15266:15268 ioctl 40046207 0 returned -16
08:28:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x300}}, 0x0)

[  344.116505] binder: BINDER_SET_CONTEXT_MGR already set
[  344.122667] binder: 15267:15276 ioctl c0306201 20000000 returned -14
[  344.146872] binder: 15267:15292 unknown command 0
[  344.156966] binder: 15267:15269 ioctl 40046207 0 returned -16
08:28:45 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10000, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000100)={r2, 0x9})

08:28:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x81, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0), 0x1e6)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)

[  344.173484] binder: 15267:15292 ioctl c0306201 20008fd0 returned -22
08:28:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0xec0}}, 0x0)

08:28:45 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:45 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x29a, 0x0, 0x0})
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304400000000030630c4000040000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  344.301236] binder: BINDER_SET_CONTEXT_MGR already set
[  344.339427] binder: 15304:15307 ioctl 40046207 0 returned -16
[  344.382653] binder: 15304:15307 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != baa1e0b7f6eb11bd
[  344.399492] binder: BINDER_SET_CONTEXT_MGR already set
[  344.419981] binder: 15314:15317 ioctl 40046207 0 returned -16
[  344.437167] binder: 15314:15317 ioctl c0306201 20000100 returned -14
[  344.459031] binder: 15314:15317 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  344.473059] binder: BINDER_SET_CONTEXT_MGR already set
08:28:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x33fe0}}, 0x0)

[  344.481462] binder: 15314:15322 ioctl c0306201 20000100 returned -14
[  344.488356] binder: 15304:15321 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != baa1e0b7f6eb11bd
[  344.506050] binder: 15314:15322 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  344.514036] binder: 15304:15307 ioctl 40046207 0 returned -16
[  344.520411] binder: BINDER_SET_CONTEXT_MGR already set
[  344.528432] binder: 15314:15317 ioctl 40046207 0 returned -16
08:28:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x0)
r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8042, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000140), 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000000000), 0x200000fffc)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

08:28:46 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:46 executing program 2:
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffffb, 0x80000)
futimesat(r0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = inotify_init()
r2 = inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000003)
inotify_add_watch(r1, &(0x7f0000000200)='./file0/file0\x00', 0x80)
inotify_rm_watch(r1, r2)
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000060)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000100)={0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'none\x00', 0x11, 0x4, 0x72}, 0x2c)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))

08:28:46 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80001, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@pptp={0x18, 0x2, {0x0, @local}}, {&(0x7f0000000100)=""/142, 0x8e}, &(0x7f0000000080), 0x9}, 0xa0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="4874f1556aacee5dd12d3ebe2b3ff35c624413e46c2e20b552e3ae81c37fe01d93292dd4b218dfbc51ba6907dd14e6c68c7f6b76c95fc6abc464fed0ecf28b62fc28062afed1ba2877bc3c0619aded6ccc0b3633"], 0xfffffdb3, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x20000201}}, 0x0)

[  344.975323] binder: BINDER_SET_CONTEXT_MGR already set
[  344.995413] binder: 15332:15333 ioctl 40046207 0 returned -16
[  345.001463] binder: BINDER_SET_CONTEXT_MGR already set
08:28:46 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  345.023267] binder: 15331:15338 ioctl 40046207 0 returned -16
[  345.024074] binder: 15332:15333 unknown command 1441887304
[  345.062276] binder: BINDER_SET_CONTEXT_MGR already set
08:28:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x7ffff000}}, 0x0)

[  345.082471] binder: 15332:15333 ioctl c0306201 20008fd0 returned -22
[  345.094467] binder: 15331:15338 ioctl 40046207 0 returned -16
[  345.100292] binder: undelivered death notification, 0000000000000000
08:28:46 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x2c)
r1 = socket$inet6(0xa, 0x806, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x8, &(0x7f0000000100)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
fstat(r3, &(0x7f0000000240))
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0))
listen(r1, 0x0)

[  345.149938] binder: BINDER_SET_CONTEXT_MGR already set
08:28:46 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  345.183508] binder: 15332:15353 unknown command 1441887304
[  345.183659] binder: 15332:15333 ioctl 40046207 0 returned -16
08:28:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0xfffffdef}}, 0x0)

08:28:46 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  345.242843] binder: 15332:15353 ioctl c0306201 20008fd0 returned -22
[  345.321845] binder: BINDER_SET_CONTEXT_MGR already set
[  345.353755] binder: 15364:15367 ioctl 40046207 0 returned -16
[  345.403203] binder: BINDER_SET_CONTEXT_MGR already set
[  345.446727] binder: 15364:15374 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  345.465015] binder: 15364:15367 ioctl 40046207 0 returned -16
[  345.471405] binder: undelivered death notification, 0000000000000000
08:28:47 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000300)=""/97, &(0x7f0000000200)=0x61)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x20000)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
recvmmsg(r2, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000240)=""/78, 0x4e}], 0x2}}], 0x1, 0x0, 0x0)

08:28:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0xffffff1f}}, 0x0)

08:28:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:47 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80280, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  345.864505] binder: BINDER_SET_CONTEXT_MGR already set
08:28:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  345.894877] binder: BINDER_SET_CONTEXT_MGR already set
[  345.900183] binder: 15380:15382 ioctl 40046207 0 returned -16
[  345.906238] binder: 15376:15377 ioctl 40046207 0 returned -16
[  345.923616] binder: 15376:15377 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  345.936666] binder: BINDER_SET_CONTEXT_MGR already set
[  345.941971] binder: 15380:15382 ioctl 40046207 0 returned -16
[  345.962542] binder: 15376:15385 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x2}, 0x0)

[  345.988606] binder: BINDER_SET_CONTEXT_MGR already set
08:28:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x372, 0x200, 0x0, 0x0)

[  346.036431] binder: undelivered death notification, 0000000000000000
[  346.043076] binder: undelivered death notification, 0000000000000000
[  346.051244] binder: 15376:15377 ioctl 40046207 0 returned -16
08:28:47 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:47 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8000, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0xe, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x213, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac01000017000100000000000017b534bb26fc940447000000e0000001000000000000000000000000000000000000000000000000000000000000ffffac1414007f000001000000000000000000000000fe8000000000000000000000000000aa000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e26f8920000000000000000000000000000000000000000000000000084000500ff010000000000000000000000000001000000003c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac1414bb0000000000f4ff0000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000"], 0x1ac}}, 0x0)

08:28:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffffda, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x40, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000400)="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"}, 0x10)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={<r2=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x38, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, r2, 0x3}, @dead_binder_done={0x40086310, 0x2}, @free_buffer={0x40086303, r2}, @exit_looper, @acquire={0x40046305, 0x4}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  346.195734] binder: BINDER_SET_CONTEXT_MGR already set
[  346.203443] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
08:28:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x3}, 0x0)

[  346.238381] binder: 15407:15408 ioctl 40046207 0 returned -16
[  346.245373] binder: BINDER_SET_CONTEXT_MGR already set
[  346.262872] binder: 15411:15412 ioctl 40046207 0 returned -16
08:28:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  346.286561] binder: BINDER_SET_CONTEXT_MGR already set
[  346.322285] binder: 15407:15408 ioctl 40046207 0 returned -16
[  346.322637] binder: BINDER_SET_CONTEXT_MGR already set
08:28:47 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

[  346.364710] binder: 15411:15412 ioctl 40046207 0 returned -16
[  346.392609] binder: 15411:15418 BC_INCREFS_DONE u0000000000000000 no match
[  346.398812] binder: undelivered death notification, 0000000000000000
08:28:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x8}, 0x0)

08:28:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  346.424976] binder: undelivered death notification, 0000000000000000
[  346.464944] binder: 15411:15418 BC_DEAD_BINDER_DONE 0000000000000002 not found
08:28:47 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b600"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  346.512873] binder: 15411:15418 BC_FREE_BUFFER u0000000000000000 no match
[  346.544834] net_ratelimit: 22 callbacks suppressed
[  346.544842] protocol 88fb is buggy, dev hsr_slave_0
[  346.554902] protocol 88fb is buggy, dev hsr_slave_1
08:28:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0xf}, 0x0)

[  346.584528] binder: BINDER_SET_CONTEXT_MGR already set
[  346.590871] binder: 15411:15418 Acquire 1 refcount change on invalid ref 4 ret -22
[  346.603669] binder: 15438:15440 ioctl 40046207 0 returned -16
08:28:47 executing program 2:
r0 = socket$l2tp(0x18, 0x1, 0x1)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'nr0\x00', {0x2, 0x4e24, @local}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010407041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$RTC_WIE_OFF(r3, 0x7010)

08:28:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  346.640956] binder: 15438:15440 unknown command 182
[  346.643264] binder: BINDER_SET_CONTEXT_MGR already set
[  346.667274] binder: 15438:15440 ioctl c0306201 20008fd0 returned -22
[  346.676854] binder: 15411:15412 ioctl 40046207 0 returned -16
[  346.689321] binder: BINDER_SET_CONTEXT_MGR already set
[  346.710359] binder: 15411:15447 ioctl 40046207 0 returned -16
[  346.729779] binder: BINDER_SET_CONTEXT_MGR already set
08:28:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0xc0}, 0x0)

[  346.744666] binder: 15438:15451 unknown command 182
08:28:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  346.766150] binder: 15411:15418 BC_INCREFS_DONE u0000000000000000 no match
[  346.773916] binder: 15438:15440 ioctl 40046207 0 returned -16
[  346.778554] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  346.806957] binder: 15438:15451 ioctl c0306201 20008fd0 returned -22
[  346.811496] binder: 15411:15418 BC_DEAD_BINDER_DONE 0000000000000002 not found
[  346.848041] binder: 15411:15418 BC_FREE_BUFFER u0000000000000000 no match
[  346.860952] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  346.874841] protocol 88fb is buggy, dev hsr_slave_0
[  346.879920] protocol 88fb is buggy, dev hsr_slave_1
[  346.888879] binder: 15411:15418 Acquire 1 refcount change on invalid ref 4 ret -22
08:28:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r2=>0x0, 0x8}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x24, "c277332fd6f06f90304532d3e351fda121eb90836ca2b9b0f9f2740690cb4826f6ca50f2"}, &(0x7f0000000200)=0x2c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x300}, 0x0)

08:28:48 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400000, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000200)=""/119, &(0x7f0000000280)=0x77)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
sendto$inet6(r1, &(0x7f00000002c0)="8fb139e3c21d4ea72a1f4d36679efffb38deea08069e47320e6b82a986eb343148473b6eba4d8eba34572dab7d6a8dc3f473e529794297631a0bdeccad91bc816da50cb6070068855e954444f22978bbfab8", 0x52, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f830c4000002000"], 0x0, 0x0, 0x0})
r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x2)
ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000100)=""/194)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000002c0))

[  347.040546] binder: BINDER_SET_CONTEXT_MGR already set
[  347.062176] binder: 15468:15469 ioctl 40046207 0 returned -16
[  347.074404] binder: BINDER_SET_CONTEXT_MGR already set
[  347.086921] binder: 15471:15472 ioctl 40046207 0 returned -16
[  347.087079] binder: 15468:15473 unknown command 1074561807
[  347.102987] binder: 15471:15472 ioctl 80087601 20000040 returned -22
[  347.108248] binder: 15468:15473 ioctl c0306201 20008fd0 returned -22
[  347.137543] binder: undelivered death notification, 0000000000000000
[  347.154635] binder: BINDER_SET_CONTEXT_MGR already set
[  347.154653] binder: 15471:15475 ioctl 80087601 20000040 returned -22
[  347.163027] binder: 15468:15476 unknown command 1074561807
[  347.180670] binder: 15468:15476 ioctl c0306201 20008fd0 returned -22
[  347.186868] binder: 15471:15472 ioctl 40046207 0 returned -16
[  347.189270] binder: BINDER_SET_CONTEXT_MGR already set
[  347.206442] binder: 15471:15477 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  347.207643] binder: 15468:15473 ioctl 40046207 0 returned -16
08:28:48 executing program 3:
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4)
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, &(0x7f0000000240)=""/122, 0x7a, &(0x7f00000004c0)={&(0x7f00000001c0)={'sha256-generic\x00'}})
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f0000000680)=""/4096, 0x1000, &(0x7f0000000200)={&(0x7f00000000c0)={'sha256-avx2\x00'}, &(0x7f0000000100)})

08:28:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:48 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x7, "9028a84ada983cbda897a04d5b4b4735da488948cabd25c5ca430c1e62a55944", 0x2, 0xffffffff, 0x1ff, 0x50007, 0xa})
r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)

08:28:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0xec0}, 0x0)

08:28:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'team_slave_1\x00', @remote})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:48 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x1010c0, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, 0x0)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
r6 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
r7 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf10001, 0xeffffdef)
close(r5)
r8 = dup3(r2, r7, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/100)
bind$alg(r3, 0x0, 0x2b66db71f52e4be1)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000240)=0x4)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, 0x0)
ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000000100)=""/56)
ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0xf46)
inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x4000004)
fanotify_mark(0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

[  347.318331] binder: BINDER_SET_CONTEXT_MGR already set
[  347.355017] binder: BINDER_SET_CONTEXT_MGR already set
[  347.360636] binder: 15483:15484 ioctl 40046207 0 returned -16
[  347.374980] binder: 15485:15487 ioctl 40046207 0 returned -16
[  347.389668] binder: undelivered death notification, 0000000000000000
08:28:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x33fe0}, 0x0)

08:28:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  347.444012] protocol 88fb is buggy, dev hsr_slave_0
[  347.450100] protocol 88fb is buggy, dev hsr_slave_1
[  347.460771] binder: BINDER_SET_CONTEXT_MGR already set
08:28:48 executing program 3:
timer_create(0x7, &(0x7f0000000080)={0x0, 0x4, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=<r0=>0x0)
timer_delete(r0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x40400, 0x0)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000200)="a241cd4b58ad25004a9a526c68142efe401399c245bd9ce932c29b170dcc3a9b93067196504794924d5a66ce8f1f6de192e5ae2a38879c7e689d3eee6650f2f669cab11ad828be70df439e6a", 0x4c}, {&(0x7f0000000180)="f7be38e4", 0x4}, {&(0x7f0000000280)="f1cdc8949bf5161959957ba898a52ee2120cd9774602878ba4137315c9239e8d4ad4514f6010a855ff19818922d1c80760fc33bb4eeccc1defc80f496782cf41762fdcb1458bbe1e81026b75b5e2cc84cca00d7860a1d0037ca72276f3c0fba6940cf62094bfc25f5ef7fefc545310aa8a6748b4e5527193a460a657e80af39e5f2101e5adae91a568e46df75b0f700bdba8fe0b07e97fd6979a56e250193d5c926a42a67db6502a57df015368ad2fdb5edfa9a3ffd81d12f2e5335ab60bfc736fcd8cd0af01f49d4ef5346c7ccf76b7104f0916f9b19f271769c8234da610d24d7a84cb4d165ad687", 0xe9}], 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x20)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'\x00\x00\xbdh\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x84', 0x2})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000100))
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x8000000000000)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0xfffffffffffffffc)

08:28:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  347.536053] binder: 15483:15484 ioctl 40046207 0 returned -16
08:28:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@loopback, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8)
accept4$packet(0xffffffffffffff9c, &(0x7f0000000740)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14, 0x80800)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x881, r0})
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b70000140000000000000000000000000000000000000000"], 0x0}, 0x48)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x1f, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0xa, 0x3, 0x8)
dup2(r4, r4)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44)
r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r9 = dup3(r3, r1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0209000002000000000000000000080000000000000000cc27fafd1864fc2fd98b13e04328c460d07a66c8d2823059fa142891fa040841ff809b60b0cd4bc0c367"], 0x41}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r10, &(0x7f0000000180), 0x400000000000117, 0x0)
syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2)
clock_gettime(0x0, &(0x7f0000000380)={<r11=>0x0, <r12=>0x0})
futimesat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r11, r12/1000+30000}, {0x77359400}})
listen(r8, 0xfffffffffffffefc)
munlockall()
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r2, 0x20000000008912, &(0x7f00000003c0)="0a5c2d0240316285717070")

08:28:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x20000201}, 0x0)

08:28:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000080)={0x3, &(0x7f0000000400)=""/4096, &(0x7f0000000300)=[{0x8, 0x1000, 0x7, &(0x7f0000001400)=""/4096}, {0x200, 0xce, 0x3f, &(0x7f0000000200)=""/206}, {0x20, 0x5b, 0x2, &(0x7f0000000140)=""/91}]})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000380)=[0x0, 0x92d])
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  347.744859] protocol 88fb is buggy, dev hsr_slave_0
[  347.749994] protocol 88fb is buggy, dev hsr_slave_1
[  347.783606] bridge0: port 3(gretap0) entered blocking state
08:28:49 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x6, 0x7a, 0x8000000001}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="a7", 0x0, 0x1}, 0x20)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x420100, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x9, 0x4)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c)

[  347.819071] bridge0: port 3(gretap0) entered disabled state
[  347.841691] binder: BINDER_SET_CONTEXT_MGR already set
08:28:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x7ffff000}, 0x0)

08:28:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  347.881638] binder: 15531:15536 ioctl 40046207 0 returned -16
[  347.893795] device gretap0 entered promiscuous mode
[  347.952445] binder: 15531:15546 unknown command 0
[  347.972224] bridge0: port 3(gretap0) entered blocking state
[  347.976736] binder: 15531:15546 ioctl c0306201 200001c0 returned -22
[  347.978544] bridge0: port 3(gretap0) entered forwarding state
[  348.019901] binder: BINDER_SET_CONTEXT_MGR already set
[  348.020437] binder: 15531:15549 unknown command 0
[  348.030394] binder: 15531:15546 ioctl 40046207 0 returned -16
[  348.032677] binder: 15531:15549 ioctl c0306201 200001c0 returned -22
[  348.065081] protocol 88fb is buggy, dev hsr_slave_0
[  348.070223] protocol 88fb is buggy, dev hsr_slave_1
[  348.125488] binder: BINDER_SET_CONTEXT_MGR already set
[  348.130828] binder: 15485:15500 ioctl 40046207 0 returned -16
08:28:49 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9cf338079d221fa0"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:49 executing program 3:
getpid()
r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000140))
r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0xc80, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08080006a200fdffff0720ff2d8b00000008000500200000000000000000af0000000000000002a0385e52a2cb20a70e4d30904c2c854530e4e135e9b4c31a0d036b39b4ecb6ff6545aac5992b8e9f345307f6771775250f59ece903a416207223b8f7ca0ab0c2e2345b6a6e8d185b9eb9b51eaff8c31f7c4793caffe5d6d4fad748c9e8d97e8927bfa005db80126f9fada123898c5dea81d73d37987e2436f9e9227316ec53627209cc68e4ea3c4f194667dbc7c472e7491f86f6480855518df625c57ec4b3095d3ca27a3562346d1dac9833cd74ad8c98bf9cfd40bc13ce2493bd5bae92ae"], 0x1}}, 0x0)
syncfs(0xffffffffffffffff)
r3 = syz_open_dev$amidi(0x0, 0x261, 0x0)
r4 = msgget$private(0x0, 0x0)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0x7fff, 0x3b, 0x3, 0x3, 0x1, 0xa843})
msgsnd(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
msgsnd(r4, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0)
msgrcv(r4, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000780)={'syz', 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1f, 0x64f, 0x4, 0x0, 0x3, r1, 0x8}, 0x2c)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x8, 0x0, [{0x90f, 0x0, 0x7}, {0xc0011ff3, 0x0, 0x914a}, {0x6bd, 0x0, 0x2}, {0xb9f, 0x0, 0x9}, {0x93c, 0x0, 0xf80000000}, {0xfff, 0x0, 0x1000}, {0xafa, 0x0, 0x99}, {0x175, 0x0, 0x4}]})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x17000, 0x5004, 0xa, 0x9, 0x8, 0x4, 0x8000, 0xfffffffffffffff7, 0xffffffffffffffa3, 0x2, 0x3f2, 0x7eb}, {0x1000, 0x5000, 0x7cda265e46961b7b, 0x7, 0x9, 0x77d, 0x3, 0x5, 0xffffffffffffffff, 0xf3, 0x3ff, 0x2}, {0x4, 0xf000, 0xf, 0x8000, 0x100000001, 0x100000001, 0x8, 0x5, 0x80, 0x80000000, 0xbb2, 0xf7}, {0x2000, 0x4001, 0xe, 0x20, 0x9, 0x1f, 0x6, 0x6, 0x40, 0xc8, 0x20, 0x5}, {0x3000, 0x5000, 0xf, 0x40, 0xf1, 0x2462, 0x80, 0xfffffffffffffff8, 0x7, 0x3, 0x0, 0x514}, {0x0, 0xf000, 0x10, 0x4, 0x4, 0xc000, 0x8, 0x6, 0x61, 0x100, 0x3ff, 0x100000000}, {0x10000, 0x6000, 0xf, 0x10000, 0x3f, 0x10000, 0xb6dc, 0x5, 0x21, 0xffffffff, 0x4, 0x3}, {0x5000, 0x5000, 0x0, 0x2, 0x1be2, 0x4a3, 0x9, 0x0, 0xe7, 0x400, 0x6, 0xc1}, {0x2000, 0x1}, {0xf001, 0x6000}, 0x1, 0x0, 0x4002, 0x2140, 0x1, 0x2000, 0x105000, [0x2, 0x100000001, 0x7, 0x2]})
pause()

08:28:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0xfffffdef}, 0x0)

08:28:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080), 0x2ca, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  348.255069] binder: BINDER_SET_CONTEXT_MGR already set
08:28:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@loopback, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8)
accept4$packet(0xffffffffffffff9c, &(0x7f0000000740)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14, 0x80800)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x881, r0})
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b70000140000000000000000000000000000000000000000"], 0x0}, 0x48)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x1f, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0xa, 0x3, 0x8)
dup2(r4, r4)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44)
r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r9 = dup3(r3, r1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0209000002000000000000000000080000000000000000cc27fafd1864fc2fd98b13e04328c460d07a66c8d2823059fa142891fa040841ff809b60b0cd4bc0c367"], 0x41}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r10, &(0x7f0000000180), 0x400000000000117, 0x0)
syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2)
clock_gettime(0x0, &(0x7f0000000380)={<r11=>0x0, <r12=>0x0})
futimesat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r11, r12/1000+30000}, {0x77359400}})
listen(r8, 0xfffffffffffffefc)
munlockall()
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r2, 0x20000000008912, &(0x7f00000003c0)="0a5c2d0240316285717070")

08:28:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  348.296513] binder: 15559:15562 ioctl 40046207 0 returned -16
[  348.296670] binder: 15559:15568 unknown command 0
[  348.309192] binder: BINDER_SET_CONTEXT_MGR already set
08:28:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0xffffff1f}, 0x0)

[  348.360961] binder: 15566:15567 ioctl 40046207 0 returned -16
08:28:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2)
sendto$unix(r0, &(0x7f0000000240)="036fd18888874f4b253adff195ea91fee82621532c36ae2f6a2586f15328979f8ae3a8f6ae4bfda678341ca5b54dd86916ffbb9f492c01169026366329f7f4832a3addf27d65115329e80a70009c8ff7ca91b52cc0ca83ecf9aa4fbe59d3a7a1d4eefd77bfdb7c39f8adc4d9cba0f0f9121d76ec027458f861941906fc5c1c310171b66a9a58bc0ae9be65d3a6e0580dde8a616eb673aa249cc3a0ece901777b3a5964d596203ce5c25e2d03790b5d2222dcde4c36dc8b72bd6592dc131e849aea043d7c2d0a0b78e359285e75a2a7d904317776264a201ad5cea2bb9216011df4eb2315cf236f42cf96052a860bbef6", 0xf0, 0x840, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
chmod(&(0x7f0000000000)='./file0\x00', 0x51)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00')
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={<r3=>0x0, 0xfffffffffffffffd, r1})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2, r3, 0x6})
preadv(r1, &(0x7f0000000480), 0x1000000000000116, 0x0)

[  348.427221] binder: 15566:15567 unknown command 121172892
[  348.434048] binder: 15566:15567 ioctl c0306201 20008fd0 returned -22
[  348.465736] binder: 15559:15568 ioctl c0306201 20000040 returned -22
08:28:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  348.488962] binder: BINDER_SET_CONTEXT_MGR already set
08:28:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x2}, 0x0)

[  348.515100] binder: 15559:15562 ioctl 40046207 0 returned -16
[  348.531572] binder: 15559:15568 unknown command 0
[  348.558947] binder: 15566:15584 unknown command 121172892
[  348.575153] binder_thread_write: 3 callbacks suppressed
[  348.575169] binder: 15559:15589 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@loopback, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8)
accept4$packet(0xffffffffffffff9c, &(0x7f0000000740)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14, 0x80800)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x881, r0})
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b70000140000000000000000000000000000000000000000"], 0x0}, 0x48)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x1f, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0xa, 0x3, 0x8)
dup2(r4, r4)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44)
r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r9 = dup3(r3, r1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0209000002000000000000000000080000000000000000cc27fafd1864fc2fd98b13e04328c460d07a66c8d2823059fa142891fa040841ff809b60b0cd4bc0c367"], 0x41}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r10, &(0x7f0000000180), 0x400000000000117, 0x0)
syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2)
clock_gettime(0x0, &(0x7f0000000380)={<r11=>0x0, <r12=>0x0})
futimesat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r11, r12/1000+30000}, {0x77359400}})
listen(r8, 0xfffffffffffffefc)
munlockall()
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r2, 0x20000000008912, &(0x7f00000003c0)="0a5c2d0240316285717070")

[  348.612071] binder: 15566:15584 ioctl c0306201 20008fd0 returned -22
[  348.643091] binder: 15559:15568 ioctl c0306201 20000040 returned -22
08:28:50 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x400)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r1, 0x308, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000400)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1000, 0x80000000, 0x1, 0x3, 0x400, 0x100, "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"}, 0x1118)
r3 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x280, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00"], 0x0, 0x0, 0x0})
ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f00000000c0)='syz0\x00')
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)

08:28:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x4}, 0x0)

08:28:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:50 executing program 3:
socket$inet(0x2, 0xa, 0x8001)

08:28:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x400020000, 0x0)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000400)={0x0, 0x3, "78133ca89bd8c91aa2a565f302482c95820481137c31dbe3fba3fac01a535a90", 0xe6b, 0x9, 0x4, 0x4, 0x0, 0x8001, 0x240, 0x80000001, [0x84, 0x0, 0x1, 0x6]})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  348.839860] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET)
[  348.866412] binder: BINDER_SET_CONTEXT_MGR already set
[  348.881386] binder: BINDER_SET_CONTEXT_MGR already set
08:28:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x6}, 0x0)

08:28:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@loopback, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8)
accept4$packet(0xffffffffffffff9c, &(0x7f0000000740)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14, 0x80800)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x881, r0})
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b70000140000000000000000000000000000000000000000"], 0x0}, 0x48)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x1f, &(0x7f0000000100)="153f6234488dd25d766070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0xa, 0x3, 0x8)
dup2(r4, r4)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44)
r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0)
close(r4)
r9 = dup3(r3, r1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0209000002000000000000000000080000000000000000cc27fafd1864fc2fd98b13e04328c460d07a66c8d2823059fa142891fa040841ff809b60b0cd4bc0c367"], 0x41}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r10, &(0x7f0000000180), 0x400000000000117, 0x0)
syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2)
clock_gettime(0x0, &(0x7f0000000380)={<r11=>0x0, <r12=>0x0})
futimesat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r11, r12/1000+30000}, {0x77359400}})
listen(r8, 0xfffffffffffffefc)
munlockall()
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r2, 0x20000000008912, &(0x7f00000003c0)="0a5c2d0240316285717070")

[  348.887524] binder: 15616:15617 ioctl 40046207 0 returned -16
[  348.906550] binder: 15611:15614 ioctl 40046207 0 returned -16
[  348.918441] binder: 15611:15619 unknown command 28
[  348.923406] binder: 15611:15619 ioctl c0306201 200001c0 returned -22
[  348.933230] binder: undelivered death notification, 0000000000000000
08:28:50 executing program 3:
r0 = getpgrp(0x0)
setpriority(0x2, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)

[  348.966533] binder: BINDER_SET_CONTEXT_MGR already set
08:28:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x8}, 0x0)

[  349.027235] binder: 15611:15614 unknown command -343900474
[  349.033175] binder: 15616:15617 ioctl 40046207 0 returned -16
[  349.048145] binder: 15611:15614 ioctl c0306201 20008fd0 returned -22
[  349.067545] binder: undelivered death notification, 0000000000000000
08:28:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x40)
unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  349.097724] binder: BINDER_SET_CONTEXT_MGR already set
[  349.103036] binder: 15611:15619 ioctl 40046207 0 returned -16
[  349.198303] binder: 15611:15636 unknown command 28
[  349.213982] binder: BINDER_SET_CONTEXT_MGR already set
[  349.219673] binder: 15611:15636 ioctl c0306201 200001c0 returned -22
[  349.252972] binder: 15645:15646 ioctl 40046207 0 returned -16
[  349.260166] binder: undelivered death notification, 0000000000000000
08:28:50 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:50 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'team_slave_1\x00', 0x600})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x400002)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="4a458c4e01af33c3b29402282c98", 0xe)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000140)={<r3=>0x0, 0x0, 0x0, 0x6, 0xfffffffffffffc01}, &(0x7f0000000180)=0x18)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0xe678}, 0x8)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
flock(r2, 0x8)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000200)={0x80fd, 0x2})
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x6)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000))
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4)

08:28:50 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0xffffffffffffff17)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
prctl$PR_GET_DUMPABLE(0x3)
r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)='md5sum{&vmnet0(user$&\'\\\x00')
socket$inet(0x2, 0x5, 0x0)

08:28:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xa}, 0x0)

08:28:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  349.294303] binder: BINDER_SET_CONTEXT_MGR already set
[  349.295394] binder: 15645:15650 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xc}, 0x0)

[  349.353154] input: syz0 as /devices/virtual/input/input10
08:28:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:50 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x50, 0x4)
setsockopt$sock_int(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4)
bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10)
r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x59983e6ddeac8e69)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000001c0))
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

08:28:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="06005200", @ANYRES16=r2, @ANYBLOB="0108000000000000000015000000"], 0x14}}, 0x0)

[  349.427156] binder: 15645:15646 ioctl 40046207 0 returned -16
[  349.453812] binder: BINDER_SET_CONTEXT_MGR already set
[  349.498082] binder: 15662:15663 ioctl 40046207 0 returned -16
08:28:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d698405af42a1579d0185ef8fa8085070c63"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffe39, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x40, 0xa2000)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={<r2=>0x0})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000200)={0x6e8, 0x5, 0xffff, 0x3f, 0x0, 0x5a6c7865, 0x5})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={r2, 0x1b})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xe}, 0x0)

[  349.552718] binder: undelivered death notification, 0000000000000000
[  349.579350] binder: undelivered death notification, 0000000000000000
08:28:50 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x40)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:50 executing program 2:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="d0", 0x1}], 0xffffffffffffe4f, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
splice(r0, 0x0, r2, 0x0, 0x8, 0x0)

[  349.661500] binder: BINDER_SET_CONTEXT_MGR already set
08:28:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
exit(0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'vlan0\x00', {0x2, 0x4e24, @empty}})
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={<r3=>0xffffffffffffffff, r1, 0x0, 0x17, &(0x7f00000002c0)='truqTed.overlay.opaqwe\x00', 0xffffffffffffffff}, 0x30)
sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0xfff)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2)

[  349.704822] binder: 15685:15689 ioctl 40046207 0 returned -16
[  349.710987] binder: 15685:15694 unknown command 1514182870
08:28:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x10}, 0x0)

[  349.768416] binder: BINDER_SET_CONTEXT_MGR already set
[  349.781866] binder: 15685:15694 ioctl c0306201 200001c0 returned -22
[  349.798983] binder: 15698:15701 ioctl 40046207 0 returned -16
[  349.805562] binder: 15685:15704 ioctl c0306201 20000000 returned -14
[  349.836613] binder: BINDER_SET_CONTEXT_MGR already set
08:28:51 executing program 2:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b", 0xf)
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x80)
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x1, 0x10, 0x8, {0x0, 0x2710}, {r2, r3/1000+10000}, {0x0, 0xee1, 0x7, 0x101}, 0x1, @can={{0x4, 0x9, 0x5, 0x3}, 0x6, 0x3, 0x0, 0x0, "f75ef19f0e39a40d"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040)
mmap(&(0x7f00005b5000/0x1000)=nil, 0x1000, 0x3, 0x20010, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200))
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0)
msgget(0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8)
fstat(0xffffffffffffffff, 0x0)
getegid()
getpgid(0xffffffffffffffff)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)

08:28:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  349.863945] binder: 15698:15711 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  349.882565] binder: 15685:15694 unknown command 1514182870
08:28:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x60}, 0x0)

[  349.918306] binder: 15685:15694 ioctl c0306201 200001c0 returned -22
[  349.930505] binder: 15698:15701 ioctl 40046207 0 returned -16
[  349.930787] binder: BINDER_SET_CONTEXT_MGR already set
08:28:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  349.991234] binder: 15685:15704 ioctl c0306201 20000000 returned -14
[  349.995403] binder: undelivered death notification, 0000000000000000
[  350.012956] binder: undelivered death notification, 0000000000000000
[  350.019379] binder: 15685:15689 ioctl 40046207 0 returned -16
08:28:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES64=0x0], @ANYPTR64, @ANYRES32=r0], 0xffd4, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x8, 0x10000)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x1}}, 0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200))

08:28:51 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
pwrite64(r0, &(0x7f0000000100)="72dfb3a1cb22f69e4e6385689c3ce76b783e77751074d7960b48c2601f0be72ae532cf073828d7ad54b9b3079377af97a770126881895d48eb4f8af4d1c922af1b723b56b8b4f75cda70f1f420c0cf2d2de7ecdb4d4464cdd4b248e675677deade323a65c369133fa0c7ab9e485993cfe9574fce4a13e4e27511fa8cb80614390a3da6", 0x83, 0x53)

08:28:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xf0}, 0x0)

08:28:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:51 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001240)={0x1, "172cf0c2d681e58b4f6317a003017e5b85fdafbd3dab27a315e8e66a97fcaa99"})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000240)={@mcast2, r1}, 0x14)
syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xfffffffffffffffe, 0x2)

[  350.190660] binder: BINDER_SET_CONTEXT_MGR already set
[  350.205748] binder: 15740:15741 ioctl 40046207 0 returned -16
08:28:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  350.238376] binder: undelivered death notification, 0000000000000000
[  350.246934] binder: 15748:15750 unknown command 536870976
[  350.264198] binder: 15748:15750 ioctl c0306201 200001c0 returned -22
[  350.275970] binder: BINDER_SET_CONTEXT_MGR already set
[  350.293574] binder: BINDER_SET_CONTEXT_MGR already set
[  350.293817] binder: 15748:15752 unknown command 536870976
[  350.300930] binder: 15740:15753 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  350.327411] binder: 15748:15752 ioctl c0306201 200001c0 returned -22
[  350.343817] binder: 15748:15750 ioctl 40046207 0 returned -16
[  350.355559] binder: 15740:15741 ioctl 40046207 0 returned -16
[  350.406872] binder: 15748:15763 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  350.419916] binder: undelivered death notification, 0000000000000000
08:28:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
exit(0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'vlan0\x00', {0x2, 0x4e24, @empty}})
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={<r3=>0xffffffffffffffff, r1, 0x0, 0x17, &(0x7f00000002c0)='truqTed.overlay.opaqwe\x00', 0xffffffffffffffff}, 0x30)
sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0xfff)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2)

08:28:51 executing program 2:
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', r1}, 0x10)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r5=>0x0}, 0x0)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000840))
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgroups(0x6, &(0x7f0000000400)=[r2, r3, r4, r5, r6, r7])
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000640)=ANY=[@ANYRESOCT])
r8 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
ftruncate(r8, 0x1000000)
sendfile(r1, r8, &(0x7f00000000c0)=0xf10001, 0xc3)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0xe4, r9, 0x802, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a4f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x4)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x2, {0x1, 0xfff, 0x7}})
close(r1)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f00000007c0)=0x3)
getpid()
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000480)={{0xffffffffffffffff, 0x3, 0x7, 0x1, 0x6}, 0x11c00000, 0x7c69})

08:28:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x142}, 0x0)

08:28:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:51 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="b87ceb34f59ebec9a038c7837643951ba41cea1d18054f718d5f7230fc9b24f6593ce643a302a56e07392bfd8291a6359eae2697bcbda34f3f2972cb2f9972456455c9507dad8ec29c76d5ce60cf246045a4e5e22820763b8392fd3c7917d1381a630d731f600fdffb67218791f2a9894bbfccfeacde8290eaf7a96a7e84671635d71c3cbe312c"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0)

[  350.648599] binder: BINDER_SET_CONTEXT_MGR already set
[  350.672495] binder: BINDER_SET_CONTEXT_MGR already set
[  350.682235] binder: 15771:15777 ioctl 40046207 0 returned -16
[  350.699394] binder: BINDER_SET_CONTEXT_MGR already set
[  350.710282] binder: 15769:15779 ioctl 40046207 0 returned -16
08:28:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x600}, 0x0)

08:28:52 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  350.717337] binder: 15771:15784 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  350.760466] binder: 15771:15777 ioctl 40046207 0 returned -16
[  350.774428] binder: 15769:15783 unknown command 887848120
[  350.792402] binder: 15769:15783 ioctl c0306201 20008fd0 returned -22
08:28:52 executing program 2:
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', r1}, 0x10)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r5=>0x0}, 0x0)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000840))
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgroups(0x6, &(0x7f0000000400)=[r2, r3, r4, r5, r6, r7])
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000640)=ANY=[@ANYRESOCT])
r8 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
ftruncate(r8, 0x1000000)
sendfile(r1, r8, &(0x7f00000000c0)=0xf10001, 0xc3)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0xe4, r9, 0x802, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a4f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x4)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x2, {0x1, 0xfff, 0x7}})
close(r1)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f00000007c0)=0x3)
getpid()
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000480)={{0xffffffffffffffff, 0x3, 0x7, 0x1, 0x6}, 0x11c00000, 0x7c69})

08:28:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xa00}, 0x0)

[  350.824071] binder: BINDER_SET_CONTEXT_MGR already set
[  350.841694] binder: undelivered death notification, 0000000000000000
[  350.848810] binder: 15769:15779 ioctl 40046207 0 returned -16
08:28:52 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  350.873642] binder: 15769:15796 unknown command 887848120
[  350.901514] binder: 15769:15796 ioctl c0306201 20008fd0 returned -22
08:28:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304400000000000000c0000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='trustedselinux\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r1, 0x1ff}, &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'sha224-arm64-neon\x00'}}, &(0x7f0000000400)="629f17697b825e433463021881fbcbd96a3e0356212d0d3295b7afeaa69a2113439012225e069665a8430c0af7e3ce5c2b048c4cc230437b605e2bb84920695ece138d21e84aadc52e6532515a9258bc06454ca2554863b8e4af92990faf024f151326dd2df1ccfe5fdaa914094aae68e27ce8b8482d42a2825d90a8924eb541758b29eda9b25025fc99947cf6ca8f3a27c0de48c969ebcfc9534f28ddf82fcb299300ba3e73469e9f0605e66d35bc11588962b4c22fa2a489aaecdd7ece3f3957f3f55d4bfd0988b9a87fd86532236b81", &(0x7f0000000500)="07b8edab1419760a106f64497fbfdb5f410a569d98e0a5cab63e057f94fa6f2be6af8e0a1f836ec096be667288028e71f7313bc3eeb5d2549216787707613391e4c8bec8432c21e29bcca86033842b45b3c944cc3dc6b4edce326461c06146cecb5ee7bcfa0e0e816755b35620f81cacdefd5190e08b1c2640d56434f786612b7fdf0cb0df57d2939384bc3e4de1772b7e2ce0a412d8daa713dfc861481093ace54627c21b53e7bafe91712d39cfaa9643fc00ce87c29473685544feb5f5ce0ea66c9889c3cbefa5c1379ffaa4ce712ceb67fa40d1c8a7fa393dd9144318701f320cd6")

[  351.062192] binder: BINDER_SET_CONTEXT_MGR already set
[  351.080085] binder: 15808:15809 ioctl 40046207 0 returned -16
[  351.110400] binder: 15808:15809 unknown command 786432
[  351.119469] binder: 15808:15809 ioctl c0306201 20000000 returned -22
[  351.127934] binder: 15808:15809 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  351.138341] binder: BINDER_SET_CONTEXT_MGR already set
[  351.143789] binder: 15808:15809 ioctl 40046207 0 returned -16
[  351.144214] binder: 15808:15812 unknown command 786432
[  351.150362] binder: 15808:15813 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  351.162730] binder: 15808:15812 ioctl c0306201 20000000 returned -22
08:28:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
exit(0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'vlan0\x00', {0x2, 0x4e24, @empty}})
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={<r3=>0xffffffffffffffff, r1, 0x0, 0x17, &(0x7f00000002c0)='truqTed.overlay.opaqwe\x00', 0xffffffffffffffff}, 0x30)
sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0xfff)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2)

08:28:52 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xc00}, 0x0)

08:28:52 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:52 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
msgget$private(0x0, 0x80)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40000, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000300)={0xdc, &(0x7f0000000200)=""/220})
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc)
ioctl(r2, 0x8000000008911, &(0x7f0000000780)="0a5cc807002e5f84477c77c83a85715070")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001d00aa0000005e00f78a06e71ed83400", @ANYRES32=r3, @ANYBLOB="000000000a0002000000000000000000"], 0x28}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f00000001c0))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x6, 0x400040)
socket$inet6(0xa, 0x1000000000002, 0x0)
connect$netlink(r4, 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x1000)
socket$inet6(0xa, 0x1000000000002, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="f800000016001d0300000000000000000000000000000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000ff0f0000"], 0xf8}}, 0x0)
read$alg(r1, &(0x7f00000005c0)=""/161, 0xa1)

08:28:52 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310, 0x4}], 0x1000, 0x0, &(0x7f0000000400)="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"})
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L+', 0x8000}, 0x28, 0x1)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'yam0\x00', 0x9})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xfffffffffffffce8, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

[  351.529237] binder: BINDER_SET_CONTEXT_MGR already set
[  351.541610] binder: BINDER_SET_CONTEXT_MGR already set
[  351.554535] binder: 15822:15823 ioctl 40046207 0 returned -16
[  351.564919] binder: 15821:15824 ioctl 40046207 0 returned -16
[  351.571558] binder: 15821:15824 unknown command 1076652815
08:28:52 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  351.577015] binder: BINDER_SET_CONTEXT_MGR already set
[  351.584862] net_ratelimit: 18 callbacks suppressed
[  351.584870] protocol 88fb is buggy, dev hsr_slave_0
[  351.594990] protocol 88fb is buggy, dev hsr_slave_1
[  351.613556] binder: 15822:15823 ioctl 40046207 0 returned -16
08:28:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xe00}, 0x0)

[  351.623967] binder: 15821:15824 ioctl c0306201 20008fd0 returned -22
08:28:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x2100)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000100)=0xf5, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)

08:28:52 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
msgget$private(0x0, 0x80)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40000, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000300)={0xdc, &(0x7f0000000200)=""/220})
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc)
ioctl(r2, 0x8000000008911, &(0x7f0000000780)="0a5cc807002e5f84477c77c83a85715070")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001d00aa0000005e00f78a06e71ed83400", @ANYRES32=r3, @ANYBLOB="000000000a0002000000000000000000"], 0x28}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f00000001c0))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x6, 0x400040)
socket$inet6(0xa, 0x1000000000002, 0x0)
connect$netlink(r4, 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x1000)
socket$inet6(0xa, 0x1000000000002, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="f800000016001d0300000000000000000000000000000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000ff0f0000"], 0xf8}}, 0x0)
read$alg(r1, &(0x7f00000005c0)=""/161, 0xa1)

08:28:52 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  351.672186] binder: BINDER_SET_CONTEXT_MGR already set
[  351.731149] binder: 15821:15824 ioctl 40046207 0 returned -16
[  351.731244] binder: 15821:15843 unknown command 1076652815
08:28:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x3f00}, 0x0)

[  351.774166] binder: 15821:15843 ioctl c0306201 20008fd0 returned -22
[  351.784014] binder: BINDER_SET_CONTEXT_MGR already set
[  351.810370] binder: 15844:15846 ioctl 40046207 0 returned -16
[  351.861601] binder: BINDER_SET_CONTEXT_MGR already set
[  351.904840] protocol 88fb is buggy, dev hsr_slave_0
[  351.909956] protocol 88fb is buggy, dev hsr_slave_1
[  351.923716] binder: 15844:15846 ioctl 40046207 0 returned -16
[  352.224849] protocol 88fb is buggy, dev hsr_slave_0
[  352.229969] protocol 88fb is buggy, dev hsr_slave_1
[  352.235127] protocol 88fb is buggy, dev hsr_slave_0
[  352.240192] protocol 88fb is buggy, dev hsr_slave_1
08:28:53 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
exit(0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'vlan0\x00', {0x2, 0x4e24, @empty}})
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={<r3=>0xffffffffffffffff, r1, 0x0, 0x17, &(0x7f00000002c0)='truqTed.overlay.opaqwe\x00', 0xffffffffffffffff}, 0x30)
sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0xfff)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2)

08:28:53 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:53 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:53 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/171)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0xffffff48)
r1 = shmget(0x1, 0x2000, 0x7800028a, &(0x7f0000ffc000/0x2000)=nil)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x6}}, 0x20)
shmctl$IPC_RMID(r1, 0x0)
accept4$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x20000000})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200000)

08:28:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x4201}, 0x0)

08:28:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20080, 0x0)
ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000080)=0xfff)

[  352.398833] binder: BINDER_SET_CONTEXT_MGR already set
[  352.415049] binder: 15869:15870 ioctl 40046207 0 returned -16
[  352.415108] binder: BINDER_SET_CONTEXT_MGR already set
08:28:53 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x5865}, 0x0)

08:28:53 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/171)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0xffffff48)
r1 = shmget(0x1, 0x2000, 0x7800028a, &(0x7f0000ffc000/0x2000)=nil)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x6}}, 0x20)
shmctl$IPC_RMID(r1, 0x0)
accept4$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x20000000})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200000)

[  352.453722] binder: 15862:15863 ioctl 40046207 0 returned -16
[  352.456758] binder: BINDER_SET_CONTEXT_MGR already set
[  352.529054] binder: 15869:15870 ioctl 40046207 0 returned -16
[  352.529204] binder: BINDER_SET_CONTEXT_MGR already set
08:28:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x1, 0x9, 0x1, 0xffffffffffffffe1}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0ff70c4000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:53 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  352.576906] binder: 15862:15885 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  352.589700] binder: 15862:15863 ioctl 40046207 0 returned -16
08:28:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x6000}, 0x0)

[  352.631035] binder: BINDER_SET_CONTEXT_MGR already set
[  352.675012] binder: 15888:15892 ioctl 40046207 0 returned -16
[  352.693143] binder: 15888:15896 unknown command 1074591503
[  352.746413] binder: 15888:15896 ioctl c0306201 20008fd0 returned -22
[  352.784841] protocol 88fb is buggy, dev hsr_slave_0
[  352.787303] binder: BINDER_SET_CONTEXT_MGR already set
[  352.789988] protocol 88fb is buggy, dev hsr_slave_1
[  352.816172] binder: 15888:15892 ioctl 40046207 0 returned -16
[  352.823195] binder: 15888:15904 unknown command 1074591503
[  352.831632] binder: 15888:15904 ioctl c0306201 20008fd0 returned -22
08:28:54 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
exit(0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'vlan0\x00', {0x2, 0x4e24, @empty}})
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={<r3=>0xffffffffffffffff, r1, 0x0, 0x17, &(0x7f00000002c0)='truqTed.overlay.opaqwe\x00', 0xffffffffffffffff}, 0x30)
sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0xfff)

08:28:54 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x80005, 0x3f)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={<r2=>0x0, 0x5b94}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, &(0x7f0000000140)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:54 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/171)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0xffffff48)
r1 = shmget(0x1, 0x2000, 0x7800028a, &(0x7f0000ffc000/0x2000)=nil)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x6}}, 0x20)
shmctl$IPC_RMID(r1, 0x0)
accept4$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x20000000})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200000)

08:28:54 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x6558}, 0x0)

08:28:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0xeb6009d765fd4638, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0cf7b991b7f0ca1c63"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={<r2=>0x0, 0x73, "24c6af71761a25de9854b47708d9e2091a8ff28274ef5f939f0f4a7f0e62f74fd32fb726b633139cb514dbd4b16cc3476003a617c1980530a1df873e0908b51ee457caadc27523ca51f796dca83ada5dd95e92f7df18c6a6b23b3ba5aa4b867c93f999e139d5787c765f3c282873b7a576652f"}, &(0x7f0000000380)=0x7b)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r2, 0x97da}, &(0x7f0000000440)=0x8)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x98, 0x0, &(0x7f0000000200)=[@free_buffer={0x40086303, r3}, @acquire_done={0x40106309, r3, 0x1}, @register_looper, @register_looper, @increfs={0x40046304, 0x2}, @enter_looper, @transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @flat={0x77622a85, 0x1, r3, 0x1}], &(0x7f0000000180)=[0x30, 0x38]}, 0x4}}, @release={0x40046306, 0x4}, @request_death={0x400c630e, 0x0, 0x2}], 0x0, 0x0, 0x0})
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xa9)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  353.246725] binder: BINDER_SET_CONTEXT_MGR already set
08:28:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x8100}, 0x0)

08:28:54 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  353.275383] binder: 15909:15910 ioctl 40046207 0 returned -16
[  353.281832] binder: BINDER_SET_CONTEXT_MGR already set
[  353.302705] binder: 15907:15916 ioctl 40046207 0 returned -16
[  353.308353] binder: 15909:15919 unknown command -1850083572
08:28:54 executing program 2:
fcntl$getown(0xffffffffffffffff, 0x9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='net/tcp\x00'}, 0x30)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/tcp\x00')
preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f00000014c0)=""/89, 0x59}], 0x2, 0x0)

[  353.390046] binder: 15909:15919 ioctl c0306201 200001c0 returned -22
[  353.422804] binder: BINDER_SET_CONTEXT_MGR already set
08:28:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xf000}, 0x0)

[  353.439354] binder: 15907:15916 ioctl 40046207 0 returned -16
[  353.442572] binder: 15909:15910 BC_FREE_BUFFER u0000000000000000 no match
08:28:54 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:54 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7aed4845f4aae55f90902dd83664ed8abafe125282514c6d54d98028d331b8fe2ac34298ded0a9ee3a16bbf9cd017a0e0a7ffcf3c889117777ffc60c04d03ac8033ff9fe3d5f2b91a9aa762323495aba21f658aacc8650de81008c5a28671dc07cd50ed35709ada75bda9a2eb2b7ce83682d5ec40c975bc1f3a97d67f5516054271917caf061f099cde2102467c516cb15e9151eab17378708ad26de7df163924163bb32d2fb176ec0d038909ea89bb8e1ceb85ea0002ebc09a3e99ee2118c4d5c5daf7f09a2205b967cdc7ecdd487cfd767590d2cbb1bb37b3a64c6bca5bd1fc11872a0b9a3d00a3344"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc6d475ae58207192, 0x0, &(0x7f0000005fd4), 0x25f, 0x0, 0x0})
r1 = dup3(r0, r0, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x4000000, 0x49, 0x2, 'queue0\x00', 0x80000000})
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0)
ioctl$RTC_PIE_OFF(r2, 0x7006)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000100)={<r5=>0x0, <r6=>0x0})
timerfd_settime(r2, 0x1, &(0x7f0000000140)={{r3, r4+10000000}, {r5, r6+10000000}}, &(0x7f0000000180))
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802)
exit_group(0x0)

[  353.494446] binder: 15909:15910 BC_ACQUIRE_DONE u0000000000000000 no match
[  353.506443] binder: 15909:15910 ERROR: BC_REGISTER_LOOPER called without request
[  353.514027] binder: 15909:15910 ERROR: BC_REGISTER_LOOPER called without request
[  353.560925] binder: 15909:15910 IncRefs 0 refcount change on invalid ref 2 ret -22
[  353.602152] binder: BINDER_SET_CONTEXT_MGR already set
[  353.619953] binder: 15909:15910 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER
[  353.631049] binder: 15943:15944 ioctl 40046207 0 returned -16
[  353.643802] binder: 15909:15910 got transaction to invalid handle
[  353.656160] binder: 15909:15910 transaction failed 29201/-22, size 72-16 line 2896
[  353.674221] binder: 15943:15944 unknown command 1162407290
[  353.680669] binder: 15943:15944 ioctl c0306201 200001c0 returned -22
[  353.689407] binder: 15943:15944 unknown command 0
[  353.694413] binder: 15943:15944 ioctl c0306201 20000000 returned -22
[  353.695238] binder: 15909:15919 unknown command -1850083572
[  353.701107] binder: BINDER_SET_CONTEXT_MGR already set
[  353.712944] binder: 15909:15910 ioctl 40046207 0 returned -16
[  353.720495] binder: 15943:15944 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  353.728323] binder: 15909:15919 ioctl c0306201 200001c0 returned -22
[  353.741232] binder: 15909:15950 BC_FREE_BUFFER u0000000000000000 no match
[  353.751187] binder: undelivered TRANSACTION_ERROR: 29201
[  353.754429] binder: 15909:15950 BC_ACQUIRE_DONE u0000000000000000 no match
[  353.764343] binder: 15909:15950 ERROR: BC_REGISTER_LOOPER called without request
[  353.772516] binder: 15909:15950 ERROR: BC_REGISTER_LOOPER called without request
[  353.785284] binder: 15909:15950 IncRefs 0 refcount change on invalid ref 2 ret -22
[  353.793147] binder: 15909:15950 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER
[  353.801747] binder: 15909:15950 got transaction to invalid handle
[  353.808333] binder: 15909:15950 transaction failed 29201/-22, size 72-16 line 2896
[  353.816435] binder: undelivered TRANSACTION_ERROR: 29201
08:28:55 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
exit(0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'vlan0\x00', {0x2, 0x4e24, @empty}})
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r1, 0x0, 0x17, &(0x7f00000002c0)='truqTed.overlay.opaqwe\x00', 0xffffffffffffffff}, 0x30)

08:28:55 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021000000a000000000010ec0000080008001200000402000000004d000007000000b4cb8cb61b12e7280bc1bbb40af51c6900000000008c080000000000e0ffff6a36ebc6556c898a2e0100ad790000"], 0x50}}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80000, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x301f16f8d47e3b7, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'nlmon0\x00', {0x2, 0x4e24, @empty}})

08:28:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xf0ffff}, 0x0)

08:28:55 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:55 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x800, 0x802)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000140)=0x81)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x80, 0x97b, 0x1, 0x7ca]}, 0xc)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8a)
write$P9_RXATTRCREATE(r2, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7)

08:28:55 executing program 4:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
accept(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000080)=0x80)
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x1, 0x1, [0x10000, 0x5, 0x100000000, 0x76, 0x4000000000000800, 0x2, 0x7, 0x80000000]})
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

[  354.105241] binder: BINDER_SET_CONTEXT_MGR already set
08:28:55 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  354.130389] binder: BINDER_SET_CONTEXT_MGR already set
[  354.135869] binder: 15954:15955 ioctl 40046207 0 returned -16
[  354.141818] binder: 15957:15959 ioctl 40046207 0 returned -16
[  354.153844] binder: BINDER_SET_CONTEXT_MGR already set
[  354.160460] binder: 15954:15970 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  354.167832] binder_release_work: 6 callbacks suppressed
[  354.167840] binder: undelivered death notification, 0000000000000000
08:28:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x1000000}, 0x0)

08:28:55 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x10000, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r1 = semget$private(0x0, 0x4, 0x4)
semctl$SEM_STAT(r1, 0x0, 0x12, 0x0)
semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1, &(0x7f0000000200)={0x0, 0x989680})
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000000c0)=0xfff, 0x4)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xc6, 0x7, 0x81, 0x3, 0x99, 0x7, 0x4, 0x81, 0x8, 0x7fff, 0x2, 0xff, 0xfffffffffffffff8, 0x101], 0xf000, 0x1000})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r2 = add_key(&(0x7f00000005c0)='big_key\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000006c0)="c6", 0x1, 0x0)
keyctl$search(0xa, r2, &(0x7f0000000800)='trusted\x00', &(0x7f0000000840)={'syz'}, r2)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000380)={[0xf000, 0x4, 0x2001, 0x3000], 0x0, 0xd8, 0x7})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={<r4=>0x0, <r5=>0x0}, &(0x7f0000000500)=0x210)
syz_open_procfs(r4, &(0x7f0000000540)='net/udplite6\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x5}, 'port1\x00', 0x51, 0x16043c, 0x1, 0x3, 0x4, 0x543, 0x1ff, 0x0, 0x7, 0x4b})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000)
r7 = getgid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', r5, r7, 0x1000)
rt_sigprocmask(0x0, &(0x7f0000000240)={0x4f123a47}, &(0x7f0000000280), 0x8)
syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x7, 0x400)
socket$isdn_base(0x22, 0x3, 0x0)
getdents64(r6, &(0x7f00000000c0)=""/11, 0xeb)

[  354.184033] binder: 15954:15955 ioctl 40046207 0 returned -16
[  354.191712] binder: undelivered death notification, 0000000000000000
[  354.226773] binder: BINDER_SET_CONTEXT_MGR already set
08:28:55 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x103000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2)
ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000005c0)={[], 0x400000fd, 0x4, 0x1, 0x0, 0x2a, 0x4, 0x4, [], 0x4})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:55 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  354.249686] binder: 15957:15975 ioctl 40046207 0 returned -16
[  354.275121] binder: undelivered death notification, 0000000000000000
08:28:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x2000000}, 0x0)

[  354.361913] binder: BINDER_SET_CONTEXT_MGR already set
[  354.397986] binder: 15984:15985 ioctl 40046207 0 returned -16
[  354.436342] binder: 15984:15985 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  354.459219] binder: BINDER_SET_CONTEXT_MGR already set
[  354.465638] binder: 15984:15994 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  354.473659] binder: 15984:15985 ioctl 40046207 0 returned -16
08:28:56 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
exit(0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'vlan0\x00', {0x2, 0x4e24, @empty}})
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:28:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="700f167b90a56e2d1c362000fe1b3bd4137467"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="04ff59ba44776b0f495a"], 0x4, 0x1)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:56 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x4000000}, 0x0)

08:28:56 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
lseek(r0, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:56 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xd)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

[  354.953489] binder: BINDER_SET_CONTEXT_MGR already set
[  354.971729] binder: BINDER_SET_CONTEXT_MGR already set
[  354.977787] binder: 16005:16007 ioctl 40046207 0 returned -16
08:28:56 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x6000000}, 0x0)

[  354.999829] binder: 16009:16010 ioctl 40046207 0 returned -16
[  355.009080] binder: undelivered death notification, 0000000000000000
[  355.010171] binder: 16009:16016 unknown command 2065043312
[  355.030273] binder: BINDER_SET_CONTEXT_MGR already set
[  355.035041] binder: 16009:16016 ioctl c0306201 200001c0 returned -22
[  355.039147] binder: 16005:16007 ioctl 40046207 0 returned -16
08:28:56 executing program 2:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000440))
sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7)
setns(0xffffffffffffffff, 0x20002)
tkill(r2, 0x401104000000016)

[  355.076941] binder: 16009:16016 unknown command 2065043312
[  355.101468] binder: undelivered death notification, 0000000000000000
[  355.105459] binder: BINDER_SET_CONTEXT_MGR already set
[  355.136217] binder: 16009:16030 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  355.156721] binder: 16009:16010 ioctl 40046207 0 returned -16
[  355.176090] binder: 16009:16016 ioctl c0306201 200001c0 returned -22
08:28:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x8000000}, 0x0)

[  355.183697] binder: undelivered death notification, 0000000000000000
08:28:56 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:56 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  355.280086] binder: BINDER_SET_CONTEXT_MGR already set
[  355.307174] binder: 16041:16042 ioctl 40046207 0 returned -16
[  355.328023] binder: undelivered death notification, 0000000000000000
[  355.347498] binder: BINDER_SET_CONTEXT_MGR already set
[  355.393419] binder: 16041:16042 ioctl 40046207 0 returned -16
[  355.412893] binder: undelivered death notification, 0000000000000000
08:28:57 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:28:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0)
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xa000000}, 0x0)

08:28:57 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:57 executing program 2:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000440))
sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7)
setns(0xffffffffffffffff, 0x20002)
tkill(r2, 0x401104000000016)

08:28:57 executing program 1:
r0 = socket$kcm(0x10, 0x4000000003, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00672de45ae087185082cf0124b0eba06ec44102000000000000140000000000008d0051894dd65b2f", 0x2e}], 0x1}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getrlimit(0x7, &(0x7f0000000000))

[  355.829251] binder: BINDER_SET_CONTEXT_MGR already set
08:28:57 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xc000000}, 0x0)

[  355.852922] binder: 16053:16054 ioctl 40046207 0 returned -16
[  355.868264] binder: 16053:16054 unknown command 0
[  355.873568] binder: 16053:16054 ioctl c0306201 20000000 returned -22
[  355.891610] binder: 16053:16054 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:57 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video0\x00', 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000480))
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x80200, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=<r2=>0x0)
r3 = getpgid(r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x2020}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300)=0x4, 0x272)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'batadv0\x00', 0x2}, 0x18)
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0x231)
mount(&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x4000000000002, 0x0)
ioctl$TIOCNXCL(r4, 0x540d)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], &(0x7f0000000100))
ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000400))
ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x22)
r9 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0)
r10 = syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880)
socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r11=>0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000a80)=ANY=[@ANYBLOB="5700000000c6d1655b68620b8509d9b451073c818aeadabd55fd58b80515fc0997d4c2dd6dca887d574c31ff6d3cb95d4183a791f9ed928e5c00000022000000058cb7db7242610600000075274e93550475dd574d8b53751d63d09583c54a751bed67138ffafd90e9cbc7861f02abbfd408bd7a87e6cda7e0c27e6f1429fef63a4ac4f3086eecf3988f0edafa27994d524b18a2c431a8f5e454f2f5677a27dfc0bb433ce4a2dedda1bd4b6302bd2bad6493ba95539bea7a40f95c2daa6ac31dfc54baa1"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x84, &(0x7f0000000880)}, &(0x7f0000000100)=0xffffffffffffff55)
io_submit(r11, 0x64, &(0x7f00000000c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000001000), 0x0, 0x4, 0x0, 0x100000001, r9}])
pwritev(r9, &(0x7f0000000340)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81808)
sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="bc1456b3a1bd007ef35d103d0c27b056db8e7d6943ffd507f7c63020e0eac2705d5eb6f8cf65346cedbf2a7c5c123f0b88e825c54abd360cc0cd70465344cf0cb209b82e6f7cccbf0236fd79b9955b0b904f3a0941e3b781ae1375c7f616283e92c9dd6595394fd07fd8d17b55d913a5bcfd7023365bb4e8c0e36ed857852723c4c523c8277be74ec461daf644331d27f7539ca5ae1bf76a6e7a8463b853c1794f474d2d7c6db406de2287fd6ad81751df0ff779ff8c37f48fb4490593ba8d3b1b7ba343e9075e174e7a40686fabccab1d96997674a20dffe790a91023fa80131c2b284f0f732497bd2bc13df4d0b4b4adbdc3b20d1fad9e"], 0xf8, 0x840}, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
memfd_create(&(0x7f00000001c0)='veth1_to_bond\x00', 0x2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0)
sendfile(r8, r9, &(0x7f0000000380), 0x2000005)

[  355.913396] binder: BINDER_SET_CONTEXT_MGR already set
[  355.913412] binder: 16053:16054 ioctl 40046207 0 returned -16
[  355.969252] binder: 16053:16066 unknown command 0
08:28:57 executing program 2:
mkdir(&(0x7f0000508ff6)='./control\x00', 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
mknod(&(0x7f0000000080)='./control\x00', 0x210, 0xf69)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)

[  356.001786] binder: 16053:16074 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:28:57 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xe000000}, 0x0)

[  356.043741] binder: 16053:16066 ioctl c0306201 20000000 returned -22
08:28:57 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:28:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x6, 0x0, &(0x7f00000000c0)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x10000000}, 0x0)

08:28:57 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0xfffffce1}}, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x503002, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x1)
write$UHID_DESTROY(r2, &(0x7f0000000000), 0x4)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000004740))
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000200)=""/162)
vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="05ed3d6b9f4ca9aeef1e7816fb5bc8bc3957c90a87c4d7a7bb4ef5357caa3cfd34c6ef84fe824723e0ec5f39a1deb4fc3744db459b2ae89f71a36984c2b9cd8635ca680739c665d63933d89505b31426c7ad9954", 0x54}, {&(0x7f0000000340)="62c067640d8aae4e195cf6e8fd8a994a2ecfc8d8acda04c69b8d74a616d1537fa9f6bdcbec1535a734ce57ac5df88fa22b14de11b9f55d20df2555cfa54391b4d6e1e91c5c470f2ff87841afff5680e3848ca2c3eca55be8412f3f4a5d59d3c333cd28bd3cee6ee3782b8a51766dcf9ced73e5a6c0a5e0ce3d0c3ebf62d0afa10295794d7e857a72e01c3c074087a802f63e0a1cb431e269764648b34a33dd80b4148b4a668df78f12b02329d0724fac99b82683a7999cad2d94969dbed60eab2b3ee503e105e7e3", 0xc8}], 0x2, 0xd)

08:28:57 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video0\x00', 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000480))
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x80200, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=<r2=>0x0)
r3 = getpgid(r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x2020}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300)=0x4, 0x272)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'batadv0\x00', 0x2}, 0x18)
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0x231)
mount(&(0x7f0000000b80)=ANY=[@ANYBLOB="cb2b4d8d30ea9b5255175d43fca389e342de5ec740fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa85765072f75f3267f1ced252e7419523d2075fb98f5696f4bf38817b25525ef2a46b39acd223d17b505512d51acb6fea0a1e53f8e26cded92ba381b83d2692b7fa7ffd3f81026e3e999bc357521a8e9799fe114e204db050bf9a50c94d3d01f8a436ccaf26a8bd4cd371f401cff939fa559e71ce024fc3c4540465cd73fd53aa2a73fdb229d7b8fbcad172ee88d3a2c1108134b2e349048cb3fd136752e22ad37130a3014904c8afeb6943fc0d38cea7e868b819004d05a190fcb27e1b682765f16ba1733cc86ddf9b7cbfc1cea713a927999c129c37652b78963ed3d352daa19eb5b567f8156ef8661d30269dacb35b9eb5efb6ed7a40f42386c06e90c13ede70e584d826126e0acc8d9d6c446b45fa4912d4c3f59995b4cd7c7313a0c375fc582a4905617dbefd2030c5593984e80b4932fdd35a0864cad3db9d9b14c550c89efb9d79987bd170f9f580ef8fe820fffb7aff479d3d0b77cbfab7c263b06b28e41bcf9beb1232ca4a6e129cd719b48d5b28c6ae0db6028873d9ef9a2d85679395f05b4fa857f333aca961427cba61ef75b215861b2bb8ce0545af9ccaca0c2d87524f6b23c17997f988e42f22fa55ae0e44309601f3a30e9557099661d3f982869fc3b6b96f4c88b901a2da76a358b8d68b1c31880e8e177700c6f32a8dab9eb2b917516734badbf94fe95b76f375f1dee7b85c1d95a7896742b513d057ab4e7ff42a897957768533baea66650d9a220ec6b8b18d1d9126c0bf93f6cee9d2f850e2815e0195402eef1d568e2b49ba818af39715783b43c92a1b0a7788f5c10c6ed644a13e44a54bccbb8aa4d49aa32877e6918df26bac2714fe4ae716914f82ff6bb0fd768984dd3d42b5a8f5a0437aaa29578b331aa71b1b7cad15be885293d50ed8abb5ab5982de19056c7d05aa0e0276130000000000c6b0b523ea1a67dfe447c9dbc4909185ec314bf87fe42f8b06b985c6633f8b8a7f10d453498a9b21122751832784fc0f28dd1326e2137dcd57974f959e53a570a53048f8b14dafa095db2c710e63f41ad38763d148887aa6985a830deb4a84fe59301a57f20ee54a5d7d52c750d866196003f486694c817fc90747cbd3f946512fcc2cc718cced99c6e9ed6c718fce295a856012e9d85d214432e5a17735cdca4eab1846415c65a356c1f40822e747ed27967330fb23ea97f9b08b05b98b25cd26d968f39bf1ce189164c39e2f99d86b029b49b72fec8d355053d54824dc58874f83fb83346aac655edf1f5075787be8efcc4ad797790e41db30403dca5e92d5630721e032e1d6ff31a15e78696b55f58486244b3cdb548a196b6bd75419c15387bfa28984e3fbcda0363dcec289a681ab51de9cccc13cfcbc901d3ac548af8ee8701cc745f2dffec2543f3e6c215a3da6ba729e6da33b5c1685fbd7428cf30e03d67af4b75c3511d98ae3792136a79fbcdd38080016c988e01e7d4928f4003fd297d288fd3c80f459b13c015039bb269c09b6f63463bc97189cc5d00b7b80b05284004ad8621e1101ce526bc783374a3fb8bd17c5b9d5ef41c3c2a2e6d79bbb8174ae68cc04ef319cb16a8445c842110679d011faac4705e480dd15cb3aa7ae5efe6158ae3e17800c704c867a45a6a76a539ab841eedb90e0d7604c0ef186a6ba00"], 0x0, 0x0, 0x4000000000002, 0x0)
ioctl$TIOCNXCL(r4, 0x540d)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], &(0x7f0000000100))
ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000400))
ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x22)
r9 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0)
r10 = syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880)
socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r11=>0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000a80)=ANY=[@ANYBLOB="5700000000c6d1655b68620b8509d9b451073c818aeadabd55fd58b80515fc0997d4c2dd6dca887d574c31ff6d3cb95d4183a791f9ed928e5c00000022000000058cb7db7242610600000075274e93550475dd574d8b53751d63d09583c54a751bed67138ffafd90e9cbc7861f02abbfd408bd7a87e6cda7e0c27e6f1429fef63a4ac4f3086eecf3988f0edafa27994d524b18a2c431a8f5e454f2f5677a27dfc0bb433ce4a2dedda1bd4b6302bd2bad6493ba95539bea7a40f95c2daa6ac31dfc54baa1"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x84, &(0x7f0000000880)}, &(0x7f0000000100)=0xffffffffffffff55)
io_submit(r11, 0x64, &(0x7f00000000c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000001000), 0x0, 0x4, 0x0, 0x100000001, r9}])
pwritev(r9, &(0x7f0000000340)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81808)
sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="bc1456b3a1bd007ef35d103d0c27b056db8e7d6943ffd507f7c63020e0eac2705d5eb6f8cf65346cedbf2a7c5c123f0b88e825c54abd360cc0cd70465344cf0cb209b82e6f7cccbf0236fd79b9955b0b904f3a0941e3b781ae1375c7f616283e92c9dd6595394fd07fd8d17b55d913a5bcfd7023365bb4e8c0e36ed857852723c4c523c8277be74ec461daf644331d27f7539ca5ae1bf76a6e7a8463b853c1794f474d2d7c6db406de2287fd6ad81751df0ff779ff8c37f48fb4490593ba8d3b1b7ba343e9075e174e7a40686fabccab1d96997674a20dffe790a91023fa80131c2b284f0f732497bd2bc13df4d0b4b4adbdc3b20d1fad9e"], 0xf8, 0x840}, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
memfd_create(&(0x7f00000001c0)='veth1_to_bond\x00', 0x2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0)
sendfile(r8, r9, &(0x7f0000000380), 0x2000005)

[  356.686009] binder: BINDER_SET_CONTEXT_MGR already set
08:28:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x3f000000}, 0x0)

08:28:58 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  356.707061] binder: 16108:16109 ioctl 40046207 0 returned -16
[  356.731883] binder: 16108:16109 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER
08:28:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x7ff, 0x4)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ff00804824ca945f640094000500289d5aaa000000000000008449bb06d383d537b300f0fffeff2c707f8f00ff200000000010000100090a000000000000000000000000000000", 0x58}], 0x1)
r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x7, 0x40040)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000002c0)=0xffffffff)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x6)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={<r4=>0x0}, &(0x7f00000001c0)=0x8)
ioctl$TIOCSTI(r3, 0x5412, 0x10001)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={r4, 0xeafced9}, &(0x7f0000000240)=0x8)

08:28:58 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  356.835558] binder: 16108:16109 unknown command 0
08:28:58 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  356.871445] binder: 16108:16109 ioctl c0306201 20008fd0 returned -22
[  356.901755] binder: BINDER_SET_CONTEXT_MGR already set
08:28:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x42010000}, 0x0)

[  356.937402] binder: 16108:16126 ERROR: BC_REGISTER_LOOPER called without request
[  356.945072] net_ratelimit: 22 callbacks suppressed
[  356.945080] protocol 88fb is buggy, dev hsr_slave_0
[  356.945144] protocol 88fb is buggy, dev hsr_slave_1
[  356.966425] binder: 16108:16109 ioctl 40046207 0 returned -16
[  356.981926] binder: 16108:16126 unknown command 0
08:28:58 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x10001, 0x80000000, 0x0, 0x8000, 0x84, 0x3, 0x1c05400000, 0x1c, 0x0, 0x0, 0x1fa, 0x0, 0x3, 0x2, 0x100000001, 0xffffffffffff7eb8, 0xfff, 0x5, 0x40, 0x7f, 0x40, 0x0, 0x3f, 0x9, 0x100000000, 0x7, 0x100000001, 0xffff, 0x1000, 0x5, 0x5000000000000000, 0x3f, 0x2, 0x4, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x800, 0x8000}, 0x8, 0x6, 0x5, 0x6, 0x81, 0x8, 0x4}, r2, 0xc, r1, 0x8)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  357.014879] binder: 16108:16126 ioctl c0306201 20008fd0 returned -22
08:28:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c634a15e1c191"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:58 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000001980))
gettid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000014c0)={{{@in6=@local, @in6=@dev}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000015c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001600), &(0x7f0000001640)=0xc)
fstat(0xffffffffffffffff, &(0x7f00000016c0))
getresgid(0x0, &(0x7f0000001780), 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x321044, 0x0)
r1 = dup(r0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0, 0x6}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r2, 0x2877c5e9}, 0x8)
socket$inet(0x2, 0x3, 0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8)
mknodat(r1, &(0x7f0000000280)='./file0\x00', 0xd200, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00\x06\x00\x00\x00\x01\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, &(0x7f0000000140)=0x54)

08:28:58 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:58 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240))
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:28:58 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video0\x00', 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000480))
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x80200, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=<r2=>0x0)
r3 = getpgid(r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x2020}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300)=0x4, 0x272)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'batadv0\x00', 0x2}, 0x18)
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0x231)
mount(&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x4000000000002, 0x0)
ioctl$TIOCNXCL(r4, 0x540d)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], &(0x7f0000000100))
ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000400))
ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x22)
r9 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0)
r10 = syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880)
socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r11=>0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000a80)=ANY=[@ANYBLOB="5700000000c6d1655b68620b8509d9b451073c818aeadabd55fd58b80515fc0997d4c2dd6dca887d574c31ff6d3cb95d4183a791f9ed928e5c00000022000000058cb7db7242610600000075274e93550475dd574d8b53751d63d09583c54a751bed67138ffafd90e9cbc7861f02abbfd408bd7a87e6cda7e0c27e6f1429fef63a4ac4f3086eecf3988f0edafa27994d524b18a2c431a8f5e454f2f5677a27dfc0bb433ce4a2dedda1bd4b6302bd2bad6493ba95539bea7a40f95c2daa6ac31dfc54baa1"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x84, &(0x7f0000000880)}, &(0x7f0000000100)=0xffffffffffffff55)
io_submit(r11, 0x64, &(0x7f00000000c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000001000), 0x0, 0x4, 0x0, 0x100000001, r9}])
pwritev(r9, &(0x7f0000000340)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81808)
sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="bc1456b3a1bd007ef35d103d0c27b056db8e7d6943ffd507f7c63020e0eac2705d5eb6f8cf65346cedbf2a7c5c123f0b88e825c54abd360cc0cd70465344cf0cb209b82e6f7cccbf0236fd79b9955b0b904f3a0941e3b781ae1375c7f616283e92c9dd6595394fd07fd8d17b55d913a5bcfd7023365bb4e8c0e36ed857852723c4c523c8277be74ec461daf644331d27f7539ca5ae1bf76a6e7a8463b853c1794f474d2d7c6db406de2287fd6ad81751df0ff779ff8c37f48fb4490593ba8d3b1b7ba343e9075e174e7a40686fabccab1d96997674a20dffe790a91023fa80131c2b284f0f732497bd2bc13df4d0b4b4adbdc3b20d1fad9e"], 0xf8, 0x840}, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
memfd_create(&(0x7f00000001c0)='veth1_to_bond\x00', 0x2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0)
sendfile(r8, r9, &(0x7f0000000380), 0x2000005)

08:28:58 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  357.201416] IPVS: ftp: loaded support on port[0] = 21
[  357.214289] binder: BINDER_SET_CONTEXT_MGR already set
08:28:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x60000000}, 0x0)

[  357.252710] binder: 16149:16151 ioctl 40046207 0 returned -16
[  357.264849] protocol 88fb is buggy, dev hsr_slave_0
[  357.269927] protocol 88fb is buggy, dev hsr_slave_1
[  357.301502] binder: 16149:16164 unknown command 357196556
[  357.333599] binder: 16149:16164 ioctl c0306201 200001c0 returned -22
08:28:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x65580000}, 0x0)

08:28:58 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  357.392031] binder: 16149:16164 unknown command 357196556
[  357.418930] binder: BINDER_SET_CONTEXT_MGR already set
08:28:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x81000000}, 0x0)

[  357.445682] binder: 16149:16164 ioctl c0306201 200001c0 returned -22
[  357.447010] binder: 16149:16151 ioctl 40046207 0 returned -16
08:28:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x88a8ffff}, 0x0)

[  357.522403] binder: 16149:16171 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  357.523745] binder: undelivered death notification, 0000000000000000
08:28:58 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41, 0x18)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  357.695969] binder: BINDER_SET_CONTEXT_MGR already set
[  357.701312] binder: 16181:16182 ioctl 40046207 0 returned -16
[  357.759913] binder: 16181:16182 unknown command 0
[  357.785895] binder: 16181:16182 ioctl c0306201 20008fd0 returned -22
[  357.797004] binder: BINDER_SET_CONTEXT_MGR already set
[  357.808363] binder: 16181:16188 unknown command 0
[  357.814741] binder: 16181:16182 ioctl 40046207 0 returned -16
[  357.820988] binder: 16181:16188 ioctl c0306201 20008fd0 returned -22
[  357.827681] protocol 88fb is buggy, dev hsr_slave_0
[  357.827742] protocol 88fb is buggy, dev hsr_slave_1
08:28:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x9effffff}, 0x0)

08:28:59 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:59 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video0\x00', 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000480))
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x80200, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=<r2=>0x0)
r3 = getpgid(r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x2020}, 0x0, 0xffffffffffffffff, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300)=0x4, 0x272)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'batadv0\x00', 0x2}, 0x18)
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0x231)
mount(&(0x7f0000000b80)=ANY=[@ANYBLOB="cb2b4d8d30ea9b5255175d43fca389e342de5ec740fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa85765072f75f3267f1ced252e7419523d2075fb98f5696f4bf38817b25525ef2a46b39acd223d17b505512d51acb6fea0a1e53f8e26cded92ba381b83d2692b7fa7ffd3f81026e3e999bc357521a8e9799fe114e204db050bf9a50c94d3d01f8a436ccaf26a8bd4cd371f401cff939fa559e71ce024fc3c4540465cd73fd53aa2a73fdb229d7b8fbcad172ee88d3a2c1108134b2e349048cb3fd136752e22ad37130a3014904c8afeb6943fc0d38cea7e868b819004d05a190fcb27e1b682765f16ba1733cc86ddf9b7cbfc1cea713a927999c129c37652b78963ed3d352daa19eb5b567f8156ef8661d30269dacb35b9eb5efb6ed7a40f42386c06e90c13ede70e584d826126e0acc8d9d6c446b45fa4912d4c3f59995b4cd7c7313a0c375fc582a4905617dbefd2030c5593984e80b4932fdd35a0864cad3db9d9b14c550c89efb9d79987bd170f9f580ef8fe820fffb7aff479d3d0b77cbfab7c263b06b28e41bcf9beb1232ca4a6e129cd719b48d5b28c6ae0db6028873d9ef9a2d85679395f05b4fa857f333aca961427cba61ef75b215861b2bb8ce0545af9ccaca0c2d87524f6b23c17997f988e42f22fa55ae0e44309601f3a30e9557099661d3f982869fc3b6b96f4c88b901a2da76a358b8d68b1c31880e8e177700c6f32a8dab9eb2b917516734badbf94fe95b76f375f1dee7b85c1d95a7896742b513d057ab4e7ff42a897957768533baea66650d9a220ec6b8b18d1d9126c0bf93f6cee9d2f850e2815e0195402eef1d568e2b49ba818af39715783b43c92a1b0a7788f5c10c6ed644a13e44a54bccbb8aa4d49aa32877e6918df26bac2714fe4ae716914f82ff6bb0fd768984dd3d42b5a8f5a0437aaa29578b331aa71b1b7cad15be885293d50ed8abb5ab5982de19056c7d05aa0e0276130000000000c6b0b523ea1a67dfe447c9dbc4909185ec314bf87fe42f8b06b985c6633f8b8a7f10d453498a9b21122751832784fc0f28dd1326e2137dcd57974f959e53a570a53048f8b14dafa095db2c710e63f41ad38763d148887aa6985a830deb4a84fe59301a57f20ee54a5d7d52c750d866196003f486694c817fc90747cbd3f946512fcc2cc718cced99c6e9ed6c718fce295a856012e9d85d214432e5a17735cdca4eab1846415c65a356c1f40822e747ed27967330fb23ea97f9b08b05b98b25cd26d968f39bf1ce189164c39e2f99d86b029b49b72fec8d355053d54824dc58874f83fb83346aac655edf1f5075787be8efcc4ad797790e41db30403dca5e92d5630721e032e1d6ff31a15e78696b55f58486244b3cdb548a196b6bd75419c15387bfa28984e3fbcda0363dcec289a681ab51de9cccc13cfcbc901d3ac548af8ee8701cc745f2dffec2543f3e6c215a3da6ba729e6da33b5c1685fbd7428cf30e03d67af4b75c3511d98ae3792136a79fbcdd38080016c988e01e7d4928f4003fd297d288fd3c80f459b13c015039bb269c09b6f63463bc97189cc5d00b7b80b05284004ad8621e1101ce526bc783374a3fb8bd17c5b9d5ef41c3c2a2e6d79bbb8174ae68cc04ef319cb16a8445c842110679d011faac4705e480dd15cb3aa7ae5efe6158ae3e17800c704c867a45a6a76a539ab841eedb90e0d7604c0ef186a6ba00"], 0x0, 0x0, 0x4000000000002, 0x0)
ioctl$TIOCNXCL(r4, 0x540d)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], &(0x7f0000000100))
ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000400))
ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x22)
r9 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0)
r10 = syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880)
socket$inet_tcp(0x2, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r11=>0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000a80)=ANY=[@ANYBLOB="5700000000c6d1655b68620b8509d9b451073c818aeadabd55fd58b80515fc0997d4c2dd6dca887d574c31ff6d3cb95d4183a791f9ed928e5c00000022000000058cb7db7242610600000075274e93550475dd574d8b53751d63d09583c54a751bed67138ffafd90e9cbc7861f02abbfd408bd7a87e6cda7e0c27e6f1429fef63a4ac4f3086eecf3988f0edafa27994d524b18a2c431a8f5e454f2f5677a27dfc0bb433ce4a2dedda1bd4b6302bd2bad6493ba95539bea7a40f95c2daa6ac31dfc54baa1"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x84, &(0x7f0000000880)}, &(0x7f0000000100)=0xffffffffffffff55)
io_submit(r11, 0x64, &(0x7f00000000c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000001000), 0x0, 0x4, 0x0, 0x100000001, r9}])
pwritev(r9, &(0x7f0000000340)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81808)
sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="bc1456b3a1bd007ef35d103d0c27b056db8e7d6943ffd507f7c63020e0eac2705d5eb6f8cf65346cedbf2a7c5c123f0b88e825c54abd360cc0cd70465344cf0cb209b82e6f7cccbf0236fd79b9955b0b904f3a0941e3b781ae1375c7f616283e92c9dd6595394fd07fd8d17b55d913a5bcfd7023365bb4e8c0e36ed857852723c4c523c8277be74ec461daf644331d27f7539ca5ae1bf76a6e7a8463b853c1794f474d2d7c6db406de2287fd6ad81751df0ff779ff8c37f48fb4490593ba8d3b1b7ba343e9075e174e7a40686fabccab1d96997674a20dffe790a91023fa80131c2b284f0f732497bd2bc13df4d0b4b4adbdc3b20d1fad9e"], 0xf8, 0x840}, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
memfd_create(&(0x7f00000001c0)='veth1_to_bond\x00', 0x2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0)
sendfile(r8, r9, &(0x7f0000000380), 0x2000005)

08:28:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:28:59 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000001980))
gettid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000014c0)={{{@in6=@local, @in6=@dev}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000015c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001600), &(0x7f0000001640)=0xc)
fstat(0xffffffffffffffff, &(0x7f00000016c0))
getresgid(0x0, &(0x7f0000001780), 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x321044, 0x0)
r1 = dup(r0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0, 0x6}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r2, 0x2877c5e9}, 0x8)
socket$inet(0x2, 0x3, 0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8)
mknodat(r1, &(0x7f0000000280)='./file0\x00', 0xd200, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00\x06\x00\x00\x00\x01\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, &(0x7f0000000140)=0x54)

08:28:59 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  358.144879] protocol 88fb is buggy, dev hsr_slave_0
[  358.150005] protocol 88fb is buggy, dev hsr_slave_1
08:28:59 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  358.235073] binder: BINDER_SET_CONTEXT_MGR already set
[  358.274122] binder: 16196:16202 ioctl 40046207 0 returned -16
[  358.274598] IPVS: ftp: loaded support on port[0] = 21
[  358.295852] binder: undelivered death notification, 0000000000000000
08:28:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xf0ffffff}, 0x0)

08:28:59 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  358.377345] binder: BINDER_SET_CONTEXT_MGR already set
[  358.384191] binder: 16196:16210 ioctl 40046207 0 returned -16
08:28:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x840, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000140)={0x31, 0x6, 0x0, {0x4, 0x6, 0x8, 0x0, '\'vmnet1@'}}, 0x31)
inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x80000018)

[  358.464874] protocol 88fb is buggy, dev hsr_slave_0
[  358.470053] protocol 88fb is buggy, dev hsr_slave_1
08:28:59 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:28:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xffffa888}, 0x0)

[  358.546350] binder: BINDER_SET_CONTEXT_MGR already set
08:28:59 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  358.592717] binder: 16223:16224 ioctl 40046207 0 returned -16
[  358.614515] binder: BINDER_SET_CONTEXT_MGR already set
[  358.625845] binder: 16223:16224 ioctl 40046207 0 returned -16
08:29:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
fadvise64(r0, 0x0, 0xfffffffffffffff9, 0x2)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:00 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = accept4(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, &(0x7f0000000080)=0x80, 0x800)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x3}, 0x4)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0)

08:29:00 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  358.816965] binder: BINDER_SET_CONTEXT_MGR already set
[  358.844523] binder: 16239:16240 ioctl 40046207 0 returned -16
[  358.890880] binder: BINDER_SET_CONTEXT_MGR already set
[  358.918321] binder: 16239:16240 ioctl 40046207 0 returned -16
08:29:00 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xfffff000}, 0x0)

08:29:00 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'dummy0\x00', 0x1001})
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x3e6)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x2fd)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100))
sendto$inet(r0, &(0x7f0000000680)="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", 0x115, 0x1b9a4d0eb29, 0x0, 0x0)

08:29:00 executing program 1:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4002, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4, 0x8}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10)
io_setup(0x5b3, &(0x7f0000000040)=<r2=>0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
munmap(&(0x7f0000364000/0x2000)=nil, 0x2000)
io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x20000, 0x0, 0xf0000000000000, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}])
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xb4, &(0x7f00000001c0)=0x1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0)

08:29:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440000000000e630c40000000002c087b8997fc74235b5b356393e2759e9584aa5e3bf0da17f6f295b1a7dec01e24f6553a18a2ec72a898017109cda9bc4464334ffe22562f1534190af6ac81dc87968026a70ec99c8e7ed2165d7f6efffea0d94a1fb4a3cd52ee3b2b5484"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7f, 0x2000)
ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000080)={{0x3, @addr=0x4}, 0x8, 0x2, 0x41787943})

08:29:00 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  359.222904] binder: BINDER_SET_CONTEXT_MGR already set
08:29:00 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  359.276078] binder: 16260:16261 ioctl 40046207 0 returned -16
08:29:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xffffff7f}, 0x0)

[  359.315355] binder: 16260:16267 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 2374fc97897b082c != 0000000000000000
[  359.400336] binder: BINDER_SET_CONTEXT_MGR already set
08:29:00 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xffffff9e}, 0x0)

[  359.458472] binder: 16260:16261 ioctl 40046207 0 returned -16
[  359.465930] binder: 16260:16280 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 2374fc97897b082c != 0000000000000000
08:29:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7500000000000000c6759fade5dabff98343f44bcde6a7cd2f9f3f7bd7e13bbaca1ba3c5"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffc98, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000200)=""/161)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x80000)

08:29:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xfffffff0}, 0x0)

08:29:00 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  359.680913] binder: BINDER_SET_CONTEXT_MGR already set
08:29:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xf0ffffffffffff}, 0x0)

[  359.720003] binder: 16296:16297 ioctl 40046207 0 returned -16
[  359.746184] binder: 16296:16301 unknown command 117
[  359.761135] binder: 16296:16301 ioctl c0306201 200001c0 returned -22
08:29:01 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000180)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0xfce4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xc005002000003eee, 0x0, 0x0, 0x0)
getpeername(r1, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, &(0x7f0000000500)=0x80)
r3 = gettid()
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004000)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xff0919ebc0247983, 0x0, 0x0, 0xfffffffffffffdcd, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
tkill(r3, 0x14)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, {0x0, 0x2710}, {0x7, 0x0, 0x3ff, 0x0, 0x0, 0x0, "eae8dda6"}, 0x0, 0x2, @planes=0x0, 0x4})

[  359.838981] binder: 16296:16305 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:29:01 executing program 1:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4002, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4, 0x8}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10)
io_setup(0x5b3, &(0x7f0000000040)=<r2=>0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
munmap(&(0x7f0000364000/0x2000)=nil, 0x2000)
io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x20000, 0x0, 0xf0000000000000, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}])
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xb4, &(0x7f00000001c0)=0x1)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0)

[  359.899217] binder: BINDER_SET_CONTEXT_MGR already set
08:29:01 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  359.927103] binder: 16296:16301 unknown command 117
[  359.981636] binder: 16296:16297 ioctl 40046207 0 returned -16
[  359.982531] binder: 16296:16315 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  360.016116] binder: 16296:16301 ioctl c0306201 200001c0 returned -22
08:29:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x100000000000000}, 0x0)

08:29:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:01 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000100)=""/132)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = getpid()
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000540))
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x4, 0x10001, 0x9, 'syz1\x00'}, 0x5, 0x3, 0x3, r2, 0x1, 0x0, 'syz1\x00', &(0x7f0000000080)=['/dev/binder#\x00'], 0xd, [], [0x7, 0x80000001, 0x6, 0x240000000]})

08:29:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x200000000000000}, 0x0)

08:29:01 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  360.254940] binder: BINDER_SET_CONTEXT_MGR already set
[  360.301108] binder: 16331:16332 ioctl 40046207 0 returned -16
[  360.340360] QAT: Invalid ioctl
08:29:01 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f000000a000)={@dev={[], 0x16}, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x6558, 0x8}}}}}, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = fcntl$getown(0xffffffffffffff9c, 0x9)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1)

08:29:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x400000000000000}, 0x0)

08:29:01 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  360.353869] binder_release_work: 3 callbacks suppressed
[  360.353877] binder: undelivered death notification, 0000000000000000
[  360.414075] QAT: Invalid ioctl
[  360.420146] QAT: Invalid ioctl
[  360.441737] binder: BINDER_SET_CONTEXT_MGR already set
[  360.470569] binder: 16331:16332 ioctl 40046207 0 returned -16
[  360.507944] QAT: Invalid ioctl
[  360.527568] QAT: Invalid ioctl
[  360.542775] QAT: Invalid ioctl
[  360.563592] binder: undelivered death notification, 0000000000000000
[  361.995159] net_ratelimit: 19 callbacks suppressed
[  361.995189] protocol 88fb is buggy, dev hsr_slave_0
[  362.005691] protocol 88fb is buggy, dev hsr_slave_1
[  362.304893] protocol 88fb is buggy, dev hsr_slave_0
[  362.309987] protocol 88fb is buggy, dev hsr_slave_1
08:29:03 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x200, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
r1 = inotify_init1(0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
lseek(0xffffffffffffffff, 0x0, 0x5)
write(r3, &(0x7f0000000340), 0x41395527)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440))
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresgid(r5, r6, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
ioctl$int_in(r1, 0x5473, &(0x7f0000000400))
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

08:29:03 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:03 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget(0x2, 0x2000, 0x700001fe, &(0x7f0000ffe000/0x2000)=nil)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$IPC_RMID(r0, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0)

08:29:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8, 0x40)

08:29:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x600000000000000}, 0x0)

08:29:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="3d2af1961413038babd65a879b355c80e6", 0x11)
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  362.402821] binder: BINDER_SET_CONTEXT_MGR already set
08:29:03 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:03 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2})
r1 = socket(0x5, 0x3, 0x0)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x472}, 0x1}, 0x10)
r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
r3 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x40)
inotify_rm_watch(r2, r3)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

08:29:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x800000000000000}, 0x0)

[  362.426615] binder: 16363:16371 ioctl 40046207 0 returned -16
[  362.457417] mmap: syz-executor.4 (16371) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  362.457706] binder: BINDER_SET_CONTEXT_MGR already set
[  362.547538] binder: 16363:16386 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  362.596043] input:  as /devices/virtual/input/input11
[  362.611926] binder: undelivered death notification, 0000000000000000
[  362.621196] binder: 16363:16371 ioctl 40046207 0 returned -16
[  362.624844] protocol 88fb is buggy, dev hsr_slave_0
[  362.632198] protocol 88fb is buggy, dev hsr_slave_1
[  362.637380] protocol 88fb is buggy, dev hsr_slave_0
08:29:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xa00000000000000}, 0x0)

08:29:03 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  362.642474] protocol 88fb is buggy, dev hsr_slave_1
08:29:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f1e3"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  362.749475] input:  as /devices/virtual/input/input12
[  362.893161] binder: BINDER_SET_CONTEXT_MGR already set
[  362.923474] binder: 16405:16408 ioctl 40046207 0 returned -16
[  362.933054] binder: 16405:16408 unknown command 58353
[  362.944461] binder: 16405:16408 ioctl c0306201 200001c0 returned -22
[  362.970930] binder: BINDER_SET_CONTEXT_MGR already set
[  362.983894] binder: 16405:16410 unknown command 58353
[  362.989877] binder: 16405:16408 ioctl 40046207 0 returned -16
[  363.002766] binder: 16405:16410 ioctl c0306201 200001c0 returned -22
[  363.010750] binder: undelivered death notification, 0000000000000000
[  363.028341] binder: undelivered death notification, 0000000000000000
[  363.184840] protocol 88fb is buggy, dev hsr_slave_0
[  363.189910] protocol 88fb is buggy, dev hsr_slave_1
08:29:04 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x200, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
r1 = inotify_init1(0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
lseek(0xffffffffffffffff, 0x0, 0x5)
write(r3, &(0x7f0000000340), 0x41395527)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={0x0, <r4=>0x0})
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440))
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresgid(r5, r6, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
ioctl$int_in(r1, 0x5473, &(0x7f0000000400))
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

08:29:04 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xc00000000000000}, 0x0)

08:29:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440000000000e630c4000a9c693"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x6000001000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket(0xf, 0x20000000000003, 0x80000)
write(r1, &(0x7f0000000040)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d5728", 0x22)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010f29bd7000fddbdf25010000000000000002410000001000136574683a6263736630000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x28, &(0x7f0000000480)}, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x240800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@mpls_getnetconf={0x24, 0x52, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x90, 0x0}, 0x0)

08:29:04 executing program 3:
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x18)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  363.376478] binder: BINDER_SET_CONTEXT_MGR already set
08:29:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xe00000000000000}, 0x0)

[  363.398054] binder: 16417:16418 ioctl 40046207 0 returned -16
08:29:04 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  363.448635] binder: 16417:16418 BC_REQUEST_DEATH_NOTIFICATION invalid ref -1815697152
[  363.492108] binder: 16417:16427 BC_CLEAR_DEATH_NOTIFICATION death notification not active
08:29:04 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  363.534921] binder: BINDER_SET_CONTEXT_MGR already set
[  363.553005] binder: 16417:16437 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:29:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x1000000000000000}, 0x0)

[  363.584152] binder: 16417:16427 BC_REQUEST_DEATH_NOTIFICATION invalid ref -1815697152
[  363.629619] binder: 16417:16418 ioctl 40046207 0 returned -16
08:29:04 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:05 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0xe)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2001, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x7f, 0x7f, 0x9, 0x2, 0x9})
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000eb060400000000000000a3d07620f955f3b90d530000632379eb000000000000550f5f0028213ee206071a2000000000003f666676", 0x48}], 0x1)

08:29:05 executing program 2:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
r0 = socket(0x6, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/rtc0\x00', 0xfffffffffffffffd, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x18e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
personality(0x1000000)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
flistxattr(0xffffffffffffffff, &(0x7f0000001640)=""/4096, 0x1000)
rt_sigtimedwait(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8)
r2 = getpid()
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040))
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100))
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x8)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x8})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000002680)=0x9f)
ptrace(0x10, r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x365, &(0x7f00000014c0)}, 0x10)
arch_prctl$ARCH_GET_CPUID(0x1011)
set_thread_area(&(0x7f0000002640)={0x3, 0x20000800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x82})
set_thread_area(&(0x7f00000026c0)={0xffff, 0x20000801, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xe0})
request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)='/dev/rtc0\x00', 0xfffffffffffffffc)
prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='prOcppp {\x00')
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000200))
ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffffffff)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
fcntl$getflags(r1, 0x40b)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=0x0})
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00\x00\x00?\x00', @ifru_flags})

08:29:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101200, 0x0)
ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/15)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f63e045daeb0000"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x3f00000000000000}, 0x0)

08:29:05 executing program 1:
r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@caif=@dbg, &(0x7f00000000c0)=0x80)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000140)={<r1=>0x0, 0x25df}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r1, 0xfff}, &(0x7f0000000240)=0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f00000002c0)={0x6, 0x0, 0xbce, 0x81, 0x0, 0x1})
ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{<r5=>0x0}]})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000380)={r5, 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = timerfd_create(0x0, 0x0)
clock_gettime(0x2, &(0x7f00000001c0)={<r7=>0x0})
timerfd_settime(r6, 0x3, &(0x7f0000000100)={{0x0, 0x1c9c380}, {r7}}, 0x0)
read(r6, &(0x7f0000a16000)=""/71, 0x47)

08:29:05 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:05 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  364.325742] binder: BINDER_SET_CONTEXT_MGR already set
08:29:05 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x4201000000000000}, 0x0)

[  364.372648] binder: 16461:16470 ioctl 40046207 0 returned -16
[  364.409286] binder: 16461:16470 unknown command 3
[  364.440083] binder: 16461:16470 ioctl c0306201 200001c0 returned -22
08:29:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x6000000000000000}, 0x0)

08:29:05 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x20201)
fcntl$setstatus(r1, 0x4, 0x2800)
ioctl$TCXONC(r1, 0x540a, 0x0)
write(r1, &(0x7f0000000000)="95", 0x1)
dup3(r1, r0, 0x0)

[  364.492648] binder: 16461:16475 unknown command 1172333327
08:29:05 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  364.548543] binder: 16461:16475 ioctl c0306201 20008fd0 returned -22
[  364.599741] binder: BINDER_SET_CONTEXT_MGR already set
[  364.614984] binder: 16461:16470 ioctl 40046207 0 returned -16
08:29:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x6558000000000000}, 0x0)

[  364.642347] binder: 16461:16475 unknown command 5
08:29:06 executing program 2:
socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000002c0)={0x80000000, 0x0, [], {0x0, @bt={0x4, 0x3, 0x1, 0x1, 0xdc8, 0xf, 0xfffffffffffffffa, 0x6e, 0x1, 0x4, 0x1be9, 0x9, 0xee8, 0x400000000000, 0x8}}})
pwritev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081886)
sendfile(r0, r2, 0x0, 0x100000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
pwritev(r3, &(0x7f00000016c0)=[{&(0x7f0000000380)="cc09ea67286ff03ce1aa7b91f817a8b73c3bfbe73664111710de83b49f46f013b1e8d9116df4acfe52f1845bcf1519cc765235710d11a0528adbbc1415326c467ccdd8cba19396", 0x47}, {&(0x7f0000000480)="793d653d16958f774297c44d73d0a4a96e0d1bd136ead5a779a207ab4c826ef07303556ef1280f7e228060925c4f04ef39fa5d5b9557939423a80cd25ed8ea61a6a2307baf8f1610078e20a15ad31b617fb323ba0769ac820b9c2a550cb22e2a28e2c3dccc5e2ba4bb37051b942aaa83649ecc468c2cb17d2ccb6fa5496a9e09d7e8ed4d53c75f66a90506f4201233", 0x8f}, {&(0x7f0000000400)}, {&(0x7f0000000540)}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="af9d6cdbfb34aa8f539dd7361cdf3b1f4334f574db6ea8d60d68e5d1b7dbf239117e9597761a78239f8405493769f3c5d51d492b6a92247f02a3eebf8570d9ed166c9fe9cc40bb0d64d2a145a9002846a11ad223092f3b732a0f94c74acab140c2491bd8b360ad24cb61429960b055536e0430e952fd598343d000589e4702c7b67af0eec564c638d19e5eb7", 0x8c}, {&(0x7f0000001640)="c360f613dc174caddf2f0490ac", 0xd}, {&(0x7f0000001680)="ae954c0df33ed5abc3a87e488f1e095c001c1aa935422febb499b01446e57cad6d06f5f1434c0d06c6b4acfb66152c34f9b2292ca77a79f2", 0x38}], 0x8, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10)
r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x7, 0x4000)
r5 = shmget(0x3, 0x4000, 0x78000901, &(0x7f0000ffc000/0x4000)=nil)
ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040))
shmctl$IPC_RMID(r5, 0x0)
ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xe76)
recvfrom$unix(r1, &(0x7f0000000400)=""/4, 0x4, 0x100100, &(0x7f00000001c0)=@abs, 0x6e)
ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000140))

[  364.665271] binder: 16461:16475 ioctl c0306201 200001c0 returned -22
08:29:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40)
ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000300)={0x8, 0x78d})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffd6a, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7f, 0x40000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x60, r3, 0x802, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x584}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

08:29:06 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  364.831008] binder: BINDER_SET_CONTEXT_MGR already set
[  364.840240] binder: 16510:16511 ioctl 40046207 0 returned -16
[  364.847803] binder: 16510:16511 unknown command 0
[  364.852804] binder: 16510:16511 ioctl c0306201 20000000 returned -22
[  364.860296] binder: 16510:16511 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  364.870323] binder: BINDER_SET_CONTEXT_MGR already set
[  364.876435] binder: 16510:16511 ioctl 40046207 0 returned -16
[  364.882629] binder: 16510:16512 unknown command 0
[  364.888224] binder: 16510:16513 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  364.895736] binder: 16510:16512 ioctl c0306201 20000000 returned -22
08:29:06 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0))

08:29:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x8100000000000000}, 0x0)

08:29:06 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:06 executing program 3:
syz_open_procfs(0xffffffffffffffff, 0x0)
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  365.237017] binder: BINDER_SET_CONTEXT_MGR already set
08:29:06 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  365.262408] binder: 16523:16525 ioctl 40046207 0 returned -16
08:29:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x88a8ffff00000000}, 0x0)

08:29:06 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0))

[  365.306544] binder: undelivered death notification, 0000000000000000
[  365.334198] binder: BINDER_SET_CONTEXT_MGR already set
[  365.370996] binder: 16523:16525 ioctl 40046207 0 returned -16
08:29:06 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  365.422056] binder: undelivered death notification, 0000000000000000
08:29:06 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x4a, 0x5, 0x10, 0x0, 0x0, [], [], [], 0x6, 0x417})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000280)={0x6, "fa48125f1f90255bd597868589aeb7eefc782bd538838860a9efe9507c1ad9d7", 0x410, 0x8, 0x1, 0x1, 0x2})
clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000440)='gre0\x00')
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x5, @output={0x1000, 0x0, {0x1e0000, 0x400}, 0x3, 0x9}})
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

08:29:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x9effffff00000000}, 0x0)

08:29:06 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0))

08:29:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e943ca20adf3c4d342a72dcde2c9970660d2a2e92a13cf50f587aca2a62f5f00320aec02e8c258ebda88d49046b8f923254ed3d011a254b00aaddf6022b830d500695bc16dc2d027f5e3abcb10446ef8022f7a6a9f1604f3e11622198d689d442ae4bd0bad9716b65b41006f4fbe0e392badc9d00000000000000000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=[@acquire, @dead_binder_done={0x40086310, 0x4}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:06 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  365.636394] binder: 16555:16556 unknown command 550126569
[  365.662723] binder: 16555:16556 ioctl c0306201 200001c0 returned -22
08:29:06 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0))

08:29:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xf0ffffff00000000}, 0x0)

[  365.696712] binder: 16555:16564 BC_DEAD_BINDER_DONE 0000000000000004 not found
[  365.747906] binder: 16555:16556 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  365.822711] binder: BINDER_SET_CONTEXT_MGR already set
[  365.822735] binder: 16555:16564 unknown command 550126569
[  365.846603] binder: 16555:16556 ioctl 40046207 0 returned -16
[  365.895054] binder: 16555:16571 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  365.909503] binder: 16555:16556 BC_DEAD_BINDER_DONE 0000000000000004 not found
[  365.960794] binder: 16555:16564 ioctl c0306201 200001c0 returned -22
08:29:07 executing program 3:
syz_open_procfs(0xffffffffffffffff, 0x0)
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:07 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:07 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0)

08:29:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xffffff7f00000000}, 0x0)

08:29:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000080))

[  366.056926] FS-Cache: Duplicate cookie detected
[  366.061644] FS-Cache: O-cookie c=00000000471544c4 [p=00000000471e8fb0 fl=222 nc=0 na=1]
[  366.069951] FS-Cache: O-cookie d=0000000064c45bfd n=000000000991299d
[  366.076527] FS-Cache: O-key=[10] '0200020000a07f000008'
[  366.081944] FS-Cache: N-cookie c=00000000276b6837 [p=00000000471e8fb0 fl=2 nc=0 na=1]
[  366.090020] FS-Cache: N-cookie d=0000000064c45bfd n=000000007147b750
[  366.096564] FS-Cache: N-key=[10] '0200020000a07f000008'
[  366.139653] binder: undelivered death notification, 0000000000000000
[  366.171785] binder: undelivered death notification, 0000000000000000
08:29:07 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x4a, 0x5, 0x10, 0x0, 0x0, [], [], [], 0x6, 0x417})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000280)={0x6, "fa48125f1f90255bd597868589aeb7eefc782bd538838860a9efe9507c1ad9d7", 0x410, 0x8, 0x1, 0x1, 0x2})
clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000440)='gre0\x00')
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x5, @output={0x1000, 0x0, {0x1e0000, 0x400}, 0x3, 0x9}})
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

08:29:07 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:07 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10002, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000100)={'team0\x00', {0x2, 0x4e23, @local}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2c000, 0x0)
ioctl$RTC_AIE_OFF(r2, 0x7002)

08:29:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xffffffff00000000}, 0x0)

[  366.329882] binder: BINDER_SET_CONTEXT_MGR already set
08:29:07 executing program 1:
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:07 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  366.361985] binder: 16609:16610 ioctl 40046207 0 returned -16
[  366.384704] binder: BINDER_SET_CONTEXT_MGR already set
[  366.472196] binder: 16609:16610 ioctl 40046207 0 returned -16
[  366.473250] binder: undelivered death notification, 0000000000000000
[  366.506939] binder: undelivered death notification, 0000000000000000
08:29:08 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:08 executing program 3:
syz_open_procfs(0xffffffffffffffff, 0x0)
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:08 executing program 1:
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, 0x5, 0x2, 0x2}, 0xa)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0xfffffffffffff000}, 0x0)

[  367.010220] binder: BINDER_SET_CONTEXT_MGR already set
[  367.037405] binder: 16637:16640 ioctl 40046207 0 returned -16
[  367.073963] binder: undelivered death notification, 0000000000000000
[  367.083361] binder: BINDER_SET_CONTEXT_MGR already set
[  367.089649] binder: 16637:16640 ioctl 40046207 0 returned -16
[  367.103809] binder: undelivered death notification, 0000000000000000
[  367.344833] net_ratelimit: 22 callbacks suppressed
[  367.344843] protocol 88fb is buggy, dev hsr_slave_0
[  367.355053] protocol 88fb is buggy, dev hsr_slave_1
08:29:08 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x4a, 0x5, 0x10, 0x0, 0x0, [], [], [], 0x6, 0x417})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000280)={0x6, "fa48125f1f90255bd597868589aeb7eefc782bd538838860a9efe9507c1ad9d7", 0x410, 0x8, 0x1, 0x1, 0x2})
clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000440)='gre0\x00')
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x5, @output={0x1000, 0x0, {0x1e0000, 0x400}, 0x3, 0x9}})
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

08:29:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x2}, 0x0)

08:29:08 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:08 executing program 1:
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = dup(r0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xc100, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000180)=0x60)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x4}, 0x0)

[  367.462480] binder: BINDER_SET_CONTEXT_MGR already set
[  367.495149] binder: 16653:16655 ioctl 40046207 0 returned -16
08:29:08 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:08 executing program 1:
r0 = syz_open_dev$dri(0x0, 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  367.536346] binder: undelivered death notification, 0000000000000000
[  367.549542] binder: BINDER_SET_CONTEXT_MGR already set
[  367.597997] binder: 16653:16663 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  367.643276] binder: 16653:16655 ioctl 40046207 0 returned -16
[  367.665393] protocol 88fb is buggy, dev hsr_slave_0
[  367.670639] protocol 88fb is buggy, dev hsr_slave_1
08:29:09 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, 0x0)

08:29:09 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f83a4ff4ba18a05755b9bd9bfb450b53f809eb6a3bd2de442c452e963fb9c62403aee7f40d7fdd56d86b42e53749c674bee14dcb07d52ab162fc924b42a9cb46399bec51abbc9ae34704853f0b740b37976f9e1f2b24081201f3d0535a673f31d6920afa5b4b166ff2581bae3ae3696a0fb66e4110123811d0b9e6bf70f243ffcb3c057bb558d9c4a79a49481ee7b7c300996e1b6b41afb18b5d76871402e26e3a1a4704180796ceac9c2c75505c8648e74ec95bd2d8e3a323cf785dcd26185c980000000000000000000000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x6}, 0x0)

[  367.889425] binder: BINDER_SET_CONTEXT_MGR already set
[  367.900111] binder: 16682:16684 ioctl 40046207 0 returned -16
[  367.917142] binder: 16682:16684 unknown command -196134152
[  367.923796] binder: 16682:16684 ioctl c0306201 20008fd0 returned -22
[  367.943439] binder: BINDER_SET_CONTEXT_MGR already set
[  367.970345] binder: 16682:16694 unknown command -196134152
[  367.976369] binder: 16682:16684 ioctl 40046207 0 returned -16
[  367.982420] binder: 16682:16694 ioctl c0306201 20008fd0 returned -22
[  368.224874] protocol 88fb is buggy, dev hsr_slave_0
[  368.230032] protocol 88fb is buggy, dev hsr_slave_1
08:29:09 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x4a, 0x5, 0x10, 0x0, 0x0, [], [], [], 0x6, 0x417})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000280)={0x6, "fa48125f1f90255bd597868589aeb7eefc782bd538838860a9efe9507c1ad9d7", 0x410, 0x8, 0x1, 0x1, 0x2})
clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000440)='gre0\x00')
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x5, @output={0x1000, 0x0, {0x1e0000, 0x400}, 0x3, 0x9}})
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

08:29:09 executing program 1:
r0 = syz_open_dev$dri(0x0, 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x8}, 0x0)

08:29:09 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304400000001a0e630c4000000000"], 0x0, 0x0, 0x0})
r1 = socket$isdn_base(0x22, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x41a45ed5, 0x80)

08:29:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xa}, 0x0)

[  368.349793] binder: BINDER_SET_CONTEXT_MGR already set
[  368.377289] binder: 16700:16701 ioctl 40046207 0 returned -16
08:29:09 executing program 1:
r0 = syz_open_dev$dri(0x0, 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:09 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  368.438670] binder: 16700:16701 Acquire 1 refcount change on invalid ref 436207616 ret -22
[  368.495553] binder: 16700:16701 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  368.544865] protocol 88fb is buggy, dev hsr_slave_0
[  368.550021] protocol 88fb is buggy, dev hsr_slave_1
[  368.563355] binder: 16700:16707 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  368.591405] binder: 16700:16707 Acquire 1 refcount change on invalid ref 436207616 ret -22
[  368.632419] binder: BINDER_SET_CONTEXT_MGR already set
[  368.645303] binder: 16700:16707 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  368.662884] binder: 16700:16725 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  368.690477] binder: 16700:16701 ioctl 40046207 0 returned -16
08:29:10 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, 0x0)

08:29:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xc}, 0x0)

08:29:10 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:10 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:10 executing program 2:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet(0x2, 0x3, 0x1)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000000)="0594", 0x2, 0x4008800, 0x0, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000140)={0xfc, 0x7d, 0x0, {{0x0, 0xe7, 0x1ff, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20, '}ppp1[mime_typetrustedlovboxnet1', 0x7a, 'vboxnet1}}ppp0nodevGP\xcc:e\xb1\v\x80E\xd8\x96!\x8cn\xab\x94\xf9Jje\xe3\xda0\xeb\xf6\x1c\x1e\xd9s\f\xbeVb\x9d\x05}\x96\xdbG\xb8x\x1f\x0f\xf8XB\f)\x10X\xd6\xfc\xfde\x04\xe9$\xb7\x8a\xa4\xe2\xb0\xcfb\x91\xcby\xe1{H\xf6\x91\x81#P\xff\xc3\x03lr\x9a\r\x9f\xd8\xbe\xfav\x9b\xd9\x86\xb6\x1f\xa1\xab<*\xb6\xc7\xdb\x99Cx%', 0x0, '', 0x1a, 'wlan0+proc+]mime_type\"\'-@:'}}}, 0xfc)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

08:29:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000100)=[@exit_looper, @acquire={0x400c630e}], 0xffffffb2, 0x0, 0x0})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x4e21, @rand_addr=0x5b}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

08:29:10 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:10 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  368.816764] binder: BINDER_SET_CONTEXT_MGR already set
[  368.835751] binder: 16739:16740 ioctl 40046207 0 returned -16
08:29:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xe}, 0x0)

08:29:10 executing program 2:
r0 = socket(0x40000002, 0x2, 0x24)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000020080000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001835161cdd4f0c3dbd2e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700000000000000000000000000000000000000000000000000000000000000000000310000000000010068d033131662d1d7b94441efe4aa6c04065465703425433a9720497c1375c272278480c79792fd77"]}, 0xa56)

[  368.864854] protocol 88fb is buggy, dev hsr_slave_0
[  368.869940] protocol 88fb is buggy, dev hsr_slave_1
[  368.876703] binder: 16739:16740 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  368.907132] binder: 16739:16740 ioctl c0306201 20000140 returned -14
08:29:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x10}, 0x0)

[  368.953132] binder: 16739:16740 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
08:29:10 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  369.004938] binder: 16739:16754 ioctl c0306201 20000140 returned -14
[  369.045323] binder: BINDER_SET_CONTEXT_MGR already set
[  369.050644] binder: 16739:16740 ioctl 40046207 0 returned -16
08:29:10 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, 0x0)

08:29:10 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:10 executing program 2:
socketpair(0x8, 0x2, 0x5, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={<r2=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000140)=0x8)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000280)={{0x4, @addr=0x4}, "d94a2b55fd6d19b4363beea939b0161e94725c1694fa58a2be243a48276c08a0", 0x1})
openat$cgroup_type(r0, &(0x7f0000000540)='cgroup.type\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x24)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x439a}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85)
r5 = socket$netlink(0x10, 0x3, 0x8000000010)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x3692191438ae6994, &(0x7f0000023ff0)={&(0x7f0000000240)={0x18, 0x40000000000030, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}, 0x1, 0xf0ffffff00000000}, 0x0)

08:29:10 executing program 1:
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x60}, 0x0)

08:29:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7fffffff, 0x80001)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x9, 0x151, 0x100000000, 'queue1\x00', 0x1c00000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  369.671456] binder: BINDER_SET_CONTEXT_MGR already set
08:29:11 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  369.702844] binder: 16773:16780 ioctl 40046207 0 returned -16
[  369.716747] binder: undelivered death notification, 0000000000000000
[  369.733795] binder: BINDER_SET_CONTEXT_MGR already set
08:29:11 executing program 1:
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xf0}, 0x0)

08:29:11 executing program 2:
stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0))
setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x2)
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180))
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000000380)=""/93)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x121040, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000540)={{0x80000001, 0x3}, {0xed, 0x400000000}, 0x0, 0x4})
getsockopt(r1, 0x1, 0x81, 0x0, &(0x7f0000000080))
getrusage(0xffffffffffffffff, &(0x7f0000000640))
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000400))
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000000))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a80)='keyring]\x00'}, 0x30)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}], 0x1, 0x4000000)
ioctl$int_out(r0, 0x0, 0x0)
syz_open_procfs$namespace(r4, &(0x7f00000005c0)='ns/mnt\x00')
ioctl$VIDIOC_S_STD(r3, 0x40085618, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000001c0))
ioctl$TIOCEXCL(r3, 0x540c)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x8)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ioctl$EVIOCGBITSW(r5, 0x80404525, 0x0)
unshare(0x40000000)
ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000700)=""/25)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f00000000c0)={0x0, {0x1}})
socket$inet(0x2, 0x20000000000003, 0xfffffffffffeffff)

[  369.752766] binder: 16773:16780 ioctl 40046207 0 returned -16
08:29:11 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  369.796071] binder: undelivered death notification, 0000000000000000
08:29:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x6, 0x45, &(0x7f0000000080)=0x51e})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x10000, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

[  369.970571] binder: BINDER_SET_CONTEXT_MGR already set
[  369.994635] IPVS: ftp: loaded support on port[0] = 21
[  369.998553] binder: 16806:16807 ioctl 40046207 0 returned -16
[  370.021890] binder: BINDER_SET_CONTEXT_MGR already set
[  370.031911] binder: 16806:16807 ioctl 40046207 0 returned -16
[  370.119507] IPVS: ftp: loaded support on port[0] = 21
08:29:11 executing program 1:
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x142}, 0x0)

08:29:11 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$notify(r0, 0x402, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f8165aed6d113456"], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0)
ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000080)={0x1, 0x3, 0x200, 0x10000, '\x00', 0x4})
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000400)=""/4096)

08:29:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040), 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x8}, 0x1c)

08:29:11 executing program 3 (fault-call:2 fault-nth:0):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

[  370.525842] binder: BINDER_SET_CONTEXT_MGR already set
08:29:11 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  370.555509] binder: 16818:16819 ioctl 40046207 0 returned -16
08:29:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x600}, 0x0)

08:29:11 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0)

08:29:11 executing program 2:
r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7ff, 0x1)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x7, "6b36afcb7ded244d4d4e8e82e97f0a700a4433222115fba03e82c6f8afe53180", 0x0, 0x1})
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
request_key(&(0x7f0000000180)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffb)
getpeername(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x24, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000240))
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000003c0)=0x7, 0x2)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, [], &(0x7f00000001c0)={0x98f90a, 0xfffffffffffffffd, [], @p_u32=&(0x7f0000000040)}})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bcsh0\x00', r3})

[  370.596194] FAULT_INJECTION: forcing a failure.
[  370.596194] name failslab, interval 1, probability 0, space 0, times 0
[  370.627680] binder: 16818:16819 unknown command -312862984
[  370.658663] CPU: 1 PID: 16829 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  370.665523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  370.665532] Call Trace:
[  370.665560]  dump_stack+0x172/0x1f0
[  370.665600]  should_fail.cold+0xa/0x15
[  370.665626]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  370.665651]  ? ___might_sleep+0x163/0x280
[  370.665675]  __should_failslab+0x121/0x190
[  370.665699]  should_failslab+0x9/0x14
[  370.665717]  kmem_cache_alloc+0x2b2/0x6f0
[  370.665736]  ? kasan_check_write+0x14/0x20
[  370.665757]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  370.665783]  getname_flags+0xd6/0x5b0
[  370.665804]  getname+0x1a/0x20
[  370.665822]  do_sys_open+0x2c9/0x5d0
[  370.665843]  ? filp_open+0x80/0x80
[  370.665865]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  370.665884]  ? do_syscall_64+0x26/0x610
[  370.665901]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  370.691963] binder: 16818:16819 ioctl c0306201 20008fd0 returned -22
[  370.694535]  ? do_syscall_64+0x26/0x610
[  370.694560]  __x64_sys_open+0x7e/0xc0
[  370.694592]  do_syscall_64+0x103/0x610
[  370.710974]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  370.710988] RIP: 0033:0x412011
[  370.711004] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  370.711016] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  370.727813] binder: BINDER_SET_CONTEXT_MGR already set
08:29:12 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:12 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  370.730044] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  370.730054] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  370.730064] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  370.730074] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  370.730084] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
[  370.823075] binder: 16818:16819 unknown command -312862984
08:29:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xa00}, 0x0)

08:29:12 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0)

[  370.927516] binder: 16818:16832 ioctl 40046207 0 returned -16
08:29:12 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  370.974284] binder: 16818:16819 ioctl c0306201 20008fd0 returned -22
08:29:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x6d, 0x1, 0x6, "257416cc4684e60917cbb56e81b071d2", "21b24edb462efe2ae10354189e9004de245404259a8c38f1e7a899d7946814944036e4cdc29779080bec172b5caba93ff4976bdde729e9bedb72e741cbd476916b5a9ef21f7644441804737e654a5dd3e1d7eae8884df00c"}, 0x6d, 0x3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d13dd1afeb5655bc64add24aa5b805dc11c0b4e96cac95d322e6e0cc43b4cfd6be6449b258b144d2604de2fd4a0787ce0d39f24aec0a77077447dca42c8c2dd44d298702809550ed5ab4bebb180a2c216eefc4438a6a0e1c3c4dfdb3d005accf3ab25deb40008bdb7def56655ed283ec28abb646a9878af11ba9c262aac082e8e29e8276ee24c5e990d05df9e9d9badb4e99e7f4337faa7a06f02d8024e0f9093553bf995bd568206c6fda3dd00c299bfe069b486bf792995a4bc8ddcbd7a9054bcaafebb7a5540dd512bbe"], 0x0, 0x0, 0x0})
r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x41)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x371, 0x0, &(0x7f0000000240), 0xffffffffffffffa9, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="084e0cf500000000"], 0x0, 0x0, 0x0})

08:29:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xc00}, 0x0)

[  371.164677] binder: BINDER_SET_CONTEXT_MGR already set
[  371.230124] binder: 16870:16871 ioctl 40046207 0 returned -16
[  371.254150] binder: 16870:16873 unknown command 450695949
[  371.263717] binder: 16870:16873 ioctl c0306201 200001c0 returned -22
[  371.293446] binder: 16870:16871 unknown command 0
[  371.333508] binder: 16870:16871 ioctl c0306201 20000200 returned -22
08:29:12 executing program 3 (fault-call:2 fault-nth:1):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:12 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0)

08:29:12 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xe00}, 0x0)

08:29:12 executing program 2:
r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7ff, 0x1)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x7, "6b36afcb7ded244d4d4e8e82e97f0a700a4433222115fba03e82c6f8afe53180", 0x0, 0x1})
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
request_key(&(0x7f0000000180)='encrypted\x00', 0x0, 0x0, 0xfffffffffffffffb)
getpeername(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x24, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000240))
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000003c0)=0x7, 0x2)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, [], &(0x7f00000001c0)={0x98f90a, 0xfffffffffffffffd, [], @p_u32=&(0x7f0000000040)}})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bcsh0\x00', r3})

[  371.388261] binder: 16870:16873 unknown command -183742968
[  371.393941] binder: 16870:16873 ioctl c0306201 20008fd0 returned -22
[  371.472423] binder: BINDER_SET_CONTEXT_MGR already set
08:29:12 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:12 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x3f00}, 0x0)

[  371.502714] binder: 16870:16873 unknown command 450695949
[  371.516680] FAULT_INJECTION: forcing a failure.
[  371.516680] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  371.528495] CPU: 1 PID: 16889 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  371.535335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  371.544691] Call Trace:
[  371.547294]  dump_stack+0x172/0x1f0
[  371.550941]  should_fail.cold+0xa/0x15
[  371.554848]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  371.559971]  ? debug_smp_processor_id+0x3c/0x280
[  371.564747]  ? perf_trace_lock+0xeb/0x510
[  371.568906]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  371.574533]  should_fail_alloc_page+0x50/0x60
[  371.579064]  __alloc_pages_nodemask+0x1a1/0x710
[  371.583754]  ? __alloc_pages_slowpath+0x2900/0x2900
[  371.588772]  ? find_held_lock+0x35/0x130
[  371.592854]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  371.597973]  cache_grow_begin+0x9c/0x8c0
[  371.601145] binder: 16870:16871 ioctl 40046207 0 returned -16
[  371.602042]  ? getname_flags+0xd6/0x5b0
[  371.602060]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  371.602080]  kmem_cache_alloc+0x62d/0x6f0
[  371.621578]  ? kasan_check_write+0x14/0x20
[  371.625844]  getname_flags+0xd6/0x5b0
[  371.629663]  getname+0x1a/0x20
[  371.632868]  do_sys_open+0x2c9/0x5d0
[  371.636605]  ? filp_open+0x80/0x80
[  371.640162]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  371.644928]  ? do_syscall_64+0x26/0x610
[  371.648917]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  371.654290]  ? do_syscall_64+0x26/0x610
[  371.658281]  __x64_sys_open+0x7e/0xc0
[  371.662099]  do_syscall_64+0x103/0x610
[  371.665026] binder: 16870:16888 unknown command 0
[  371.666001]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  371.666015] RIP: 0033:0x412011
[  371.666032] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
08:29:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x4a8001)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r2, 0x5, 0x1000, &(0x7f00000001c0)="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", 0x2, 0x5, 0x9987, 0x3, 0xe4c, 0x0, 0x800, 'syz0\x00'})
accept4$vsock_stream(r0, &(0x7f00000011c0), 0x10, 0x800)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000005e0007031dfffd946fa2830020200a00ff0003660e1d85680c1ba3a2c40dff7e", 0x24}], 0x1}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0)

08:29:13 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  371.666041] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  371.666061] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  371.670902] binder: 16870:16888 ioctl c0306201 20000200 returned -22
[  371.676068] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  371.676078] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  371.676088] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  371.676103] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
[  371.712669] binder: 16870:16873 ioctl c0306201 200001c0 returned -22
08:29:13 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000000180)=@llc={0x1a, 0x30d, 0xbd, 0xaa, 0x445, 0x80000000, @link_local}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000040)="aa5d699f5c2affa3adec1220c10288616a87dea22cd14a24ca", 0x19}, {&(0x7f0000000200)="d2e1f6f5900d8e7c583f832f4177bd9c0fda59fae63a6e11e8e94b0e9dc77db109013c1048161efca5959d653a40f6392c2ccf61aa5197b9ea94c03a5608ce85d70bc5602ffe6dc10182a4b7c67c56033bfe75d3320bc19a7b434a35e6559fd4f899c91c590e72ce7e1564ba1849721f9d6526762c196e6a14631e6f7df7042841b939824638cca6a13f963e19dae4579181f6a26a89fd0ee07572476901f821e904114edbf7bb5e9b79c2e2de4077ca00b5399d3c94960aef4fdb066d7ef8bbf8f5c02164e1834db558e078d12ed1032a8c11b2e16452b124713bb62ecc962a", 0xe0}, {&(0x7f0000000300)="1b2980eb01b427a371ba6afaa93ac7ce9206a087e573fb4fad64555c89643fcdca2a2d652274c541722d1f8a0e8b1ecda77533d0a56b5583bcd6e2598161efb59762e0300673ff0767dae72592b561143d6a1509c9218349c2cbf8f7d52e9381bda822201ea37b65d96394cb59403b765ed8df0f285e27ac50c0f40a80eb636c571f90a4cf9f5be2e7d1940a887377dd011600aee1d15717b3caa9ddc75b96fbe3cdae1f3568b8411e3116b7e492f640f8fb70ce71632f1b53b9a92ea0028f3d70f8ab664f399e1784ce39861285ba004dded38be83a08a1ffd6627b086cf856003bd9939ad55c09ba63309c25db726d6904d4437a9dd2cf0f83825b29a77801a5e2a2ec561eed3f712c93be0b90f510e58cb947d6bb5e766ee41dd3b2b74734e11480bb9e491281778e93c6a44d1d30705a6acfe0e9eee00ae86aff3afb93a3b19c653a37928bb987f5e8774c11fac0d6da66ae140ebe2e5d145d1d0e30737bbe9bd4b466f42027f6aedd18b9d8b6f4ec4587c44cefed9f2f559c759e3a3730066c675c6867e257edc87e911a5a455e53928ea18db8ea697faf4e451389b088251735fc54776fbd52f3c1e20af32bf7a53564680ac928f29827009b8ef0585670f76831cff307e6e2d010ac6a9f78626f7cb945e19383d3fdda6d0e7eac4ed7595b50a10afd9fc3ba494882196e926e8219a944a7fdf3cb87b26758dedf15f5b4a1d07be4b93311e9e967daecab9d1a6c2ee0b1cccb9135a97324b5a710a243ecdc4718e24f7d4154ae5be8d367f1e57076aa8aaaee2419eff6864ebf9a0d3e9451deb88438ca67b238ba6e2ac60d458515ee175fa8cd41e8538b12cc6be516ea56c668623cb130e9c80e0658d6fe06815f22ba286143ce8b4b0b677df9a5811f1aaaaa39113160cd4fe0aa01bc07dea63a3d0cc7bdeb9e2dd022fff30a10dcc034c394148cc0524367d4e0fb759eedf23b20fe1ed7c131894beb97119d75e9a0c855820b862e02562df259dcc966b72e4f06918ff79f57a6d7db9097cd0bd082002189e53d766ba491e4f581f6894fed5a0a32736215538d632610ddaf69753c3139deac603f11fc9d694cebd41f0ef0246f42de13d587cb921808dc7ce80e1318952feb6be21503e2f9373a6210ef22bf682f52eaf07d17b72a6454ccbdf1214a09446006f8df7d1f92ac2a32077642689458555708daeb3494e416a3c8b227270244354ce83f6e7b1296a3c27ccba2a49d9c24c0b21f14079bc1be9f0ae01a011ac1033be3bb5d1e12b0b49a2916dc89e98b9328f23c49384f1aa69560b97b0c74749e5276729315476e10edcbe6b727e2d7a2d3bb1d67a185e3116ff05d88c7f087f33ffeb7e06763a56fc892622e278ca272f9255e57f2a3909413fa6d2496ab6ff8714e8d202469f5ebdc2b5f6310a2ae41cfa6f61af2d7f87f327eaf6722575eaae31f67474f46300408a70faba09943a8d553d739fd39f73c432a8f0559553f35e6f9b757dc3f82a755df588acc5d77c36f3edfef70f078e389396a4b7261722df2adabc65f3a43d2e63b400aca8eb14253d17f91e478708b4027bb1813e479128969f1c3520e818fb4be35e107d9cf10c68191b29230b9a6450569a7eabc80eca20207cd70ef6f29af857b56c58cc4b02754d3b1e46dd14ac1d9bd67bb416ec35e90a47503a679e0b3dae5ce6923d41d6c945fc61f2814d9f603b53d7e9045145304a4e576a8ddb9107572bcab8118e9370e8a03eccee19e154ab17dd9d2c6b3a459f3ad379da44d9cf2a1a761a2732ce30f7b5d42235c00fbb9ec9326a5b63a0222ea5defd3d26d1d2071ea872175356b14a8b333e658cd7af247d70023a4c9d6d7a9042c5715c1a3fb59df0ceae536d53ea08f326cd650b3256258ab5542b439dae271d466726e6cd926c455a5d5d542463b0eec7017f23c5c777143a93b118265ce1cfa316345ab4e18df8755c28ce7103584dc5bebfd78c2d14d7637c43af2dc8574abc96b1bb7352728101a0e6bdd1f19bef8d4433be6a1a6c55f0aeccba807d2f34490980351381c26fc1397c6cb387bd809e7bc1ca965020dd0ae592005ab02dad8b5cbd656c1a65adb1bb406c67318ab8137667dc4f08f73d66d8453ccf26ba8169c837cc72b273b666465efa6e0a32bfc52433aae556dad1cd541c6a355a390a5b0344acbe2711476fe478af5208a8be2d2e4415d7aa839da0f14b53422f50f16d8552160dd206f64a2969eef352f9ba8bcec29bc101fef8b7be35684625ec4f82858b37c128972fa5a97125a2ff4d448cce5a4ed1c40491cb34fb8f4aa8d8a551c7420994b08180a87511164599ecc55f16da76f3a537235c78ba9869f6811c35e0240ddd04d9eabedfb3378d2cbf56423acf55521809a8a8348011888e578f83ba62a7626ab7154104d409d2798b76cb51bd82b0d502f0a7525202fbdfbcee78a7770dade460ae79fbe20a2975d950b925c11dcbf6990165b075608cd41889bf06016023f4755009b1daca8a0a44f16e7e645558593e27dd527c37f4b55a6d17632f6159324d7d1f1f2ad5a021cc2b9b9892b4d811fefa4bb129b8e9a060034c08cf5b6cf3654baf2f84bc3be26e1def8766a6b125af9412b563af8e2e266384c0a881b5db88092fea7c766ffbfa0e85529536c69a6b017b1949a35458de4a81a3902c45f06c86b91e9bacd9d5dc071adeaee12e123083caf5128e90d5eca236bb310a2c819605d1afd60e7262e9b7d99afb5663f29f9f3eea1340e5a439f5bd69219ce7be6d54060588b475497d1e8102de387ee97ef1a8f21cfa56c4492e8cffac62643edd885cd020d306441d729d288ef33ac2cbd42abd9b1fc270b095e76ae134604e879ab24c6e575218c395dde2b47b7a805a65fed66c5b37a93e9e0aeeb387d72ab90f6149bf3fbfb235f8e8e93dc5c17a1f4862a11f8595ddcf4788490e0ecf4dbfb0a58c1d90ea74587389a3d50e646430cc13f46c53e2f673c7e61743e96924dc15ea71afd1b9b0edfb97b86b8de890bd555d3c44a1d0a9064501d9ff535de7d1caf5f3c8ababfd070b68d5c977c6d98e1d780471eddc3ac7498c6ce4bcb335187abd24d415d18a806870f946f21c1b8a4db407181c245eb27c3d64d2bc8efb124538b00fc64032f8c6c407b80350fc5028990184c35d4dfecee5d31c72e8f06a2776ca186294338998455776a017ab5229f117689ac997504362c1265bf804ad7aa3ddf5284c81d702d0b6b0335c69f73fcf326df6d5a9a85740309a26e63195ab7ad2d04ed4c31009efc861645cea2b6061c34cbb1f7c90be905ff6ebaa2228894454ab490b7f2e787d4956c9f5685f25712afc9a74f2fe07798b13f902d9b44a7dfecee65e27f7d2464a6cac32a74ca96866b99487042e055ec719b4c0261dcc648811f4c39cc491eda48ed7755cd21d7c2fbca25c0c0053042821266b2c153d3cfcb0bdd03a58a6d0f313a5d252d93b2020d4524407fe1539198afccda424aa38307d88181e5d47ded29ba946ea0c9d5e8263541f2e7d8a7a5433fe03cd73194734ae6e993955099d94b44a952984352c8948a93870d5c05376619321bda123d9d715eb0db34f39ee5e179a4e87a3ec54b72edadc8677846c0243a7f1b9bdfd3547e6d34042c8296a2e79090065234ead97cd27031de19cf99c2ac5a33a6288408296530f2cff3dd72f4331ae76064346ef747db9bc0515e35e8dc7188cf30171df724eb33898cbfa3e068e896d4fb310ea4a069f9cb5f2c0f9d243c6fba6adf327967956ccfd06ee9c8cdb3eef7e707d841db7c292e45ceaeba35e25351d87a999b09716b48f89f6d936959aabf839319950a3a444023ece14dc8ccabe78b3acdff28e1321f385cda4a7739d8b0971e68ce24e311e635f21de25f98118a4f291172e0f511629d65033cbfad781dafb1db9128a996082d1768241777fada4415a009f2a23c8e956c99a787dbebc0b653af1e34a39b03f8c9eb11a969560ccdcac647d6f0dc54d4b9c2405a49451e256feca1b44214f11ae0c769151f97a8c9a08b5fa515a8cb636f4703c42710554639fb91d6fea6f6061ff0d7b4b464be0aa213c07b0ff90cee5cc9381da210fbcc233dfd657f85b8fd90c8454ecb01f08ca85e1292ec9af96a5bb226e3f2de26c08613fd2a5e5e77b9d66e578370d6768c2d528cd1926f10b519641b5a8c6745a8ea29624259a14cbf9150ad2397f5ee67628008faecb9c2648892ab11f241757d11a566489923127524ce7697799ab477e0a0871a5daf5b04103a0a59b56533611124dc98a1b51792e0e716a3726fccf17f7de76e2c4e20753d49a2813ca58d8c4623e62d33221de227044973621d36633a5a88a0b6887080e5f3a5a518091fe2b5f0fc88c8d7b5fb79fc0220972176b298bad28b48d7648af42b0c1268b7dafb923515f32d2305d19bd56136df022393e3aa5941b2339994ec00697b9d2ea2845614016d43777252ae8103b7393ef0ce21a2ab316aac084f9f7759d5541e36db66253082c4cbb4c9041e5f81169906aac9b0792d1d2e52542bcba2716ad03babfa2499686d53c06eea01408de25c975cc5e24e4d75e22e0b6371b995b96bf11f75072071f4b819ee7425b6e881adac55af8b0dfbb469f3815eec9c2a857182bc50227b04448bf42ab3ca70ecac063eadfbac2e4e03e9adb6007351704e31f2600a148721b36c720d578b116e2c2331c85a464bc760525a7abc717c824c12b555cb087f6bb19cbe629dc7533db7a25849f428d0f19a2a751affb6bcaf99b4d1278e29e37c2151057cf21842830d42fbf09b9c28b82fbcb9716a425d3c21a0b8764202defcddb52b6380fdaad2d1aafb6c4a9eeaf24a974b2b15efdc4dfd576360bac356ed455bc7e816098d786dfde7d766c5ca462b902f241007e286916ce040a65a8778d313347145027f56d629dbddbfba9fa86279411d38231fe39ddd29bb99c347ced32ee0bed4a8c08597aaf89a7e88990d0cee2374a09b08a9c7a76d3368adb66b5a2b22caf0b5700d00fbfdaf0edcf40e7354410e8fcf25fd54f1ae29d75dee87f04fa93f07ad97e8653d9954e0130f74db76d1fa9f039c04b0a2a1426ec08fe5ea72c87f483308f51d008a96f55323dc1a0da1ce9da82108a3ea04696dd1c072a7b1bd5602155a2e1e66a550a575980fcb42c742c594997f299ace421381ca5bda4d9ee076b4b6bf5a5703f2d1caa295854d36105725a3c2dbf18db15c4627b3c9ff93c5281710736f730afb1b8d4e9fc5aae5bb13221bf53047f87a0d7cb9f86a3061cafa713dc288b4ffc4eaff9b39ab6da82172af7e1d8478ad31f1c028e21fd4ccf09e3cdb58218dac4a5e44f5b17adb7d7f362d7e14a3cd855ebfaf0b5ed8c1b72792001c1e43ce5236e3e2dad49aac804e959227dade3ba7f7d4a745616134c32b10cf5c0759eb4d740b26ab646a1e5b0cb0c1425054565d0e5b0084042df464461f56eb1eb15cf751ce7bbc434edef3266ce55d8d67a0bddab8715767680f3755990e95cd0ee298ff159b1fc35b5568bdca5386a96010c6b0652d974c7c3d4f1ecdd703c6a35a6329895f482aae35c75b51f23702d210accffa5036543144b0d3d7aa635a65343b81d92d38c1de3f19927ce5c6aa28409b9925fe0970f0ca27d8d356a629372b3794163535e8b423a2cc0c57ae5f62412a42c6c9fc79eed6d1281e1d8150c780e5f7cfdcb2727a6b00e1df7a8ad8b085ed670db4323b0d41c39489c4a6eb128ba5eb248af636ee07e5c82f7586ae8a230e", 0x1000}, {&(0x7f0000001300)="5aaee8cf1ec65115e8fd03b91866b27450a7dba251fc4f2fb3fae582a7e73753f57e934bdd2fb57146d9fb4cf0db97f50e91f2506905e22700b3c51f8f60fe85e7176f70a8e3dcdcf25e896550cbb7ac7fcbbca91ec724be0be9bfbc0b705d04230f130594706a613beb", 0x6a}, {&(0x7f0000001380)="a6c475a172c24e37ef216adcb369449dd1e91844339c76b4108e5ae854035ca6a2231e2d5062d3134d7cf8b20745699da8529a9fdf739b951ba8d713e510ce91400fbe0ed5b3b70dec6d6dd5d0c4066d4a15e1910f3553041881c31708b76634fc0d695e82", 0x65}, {&(0x7f0000001400)="294ec1df5d425431423df68f7c710d3028f9efeef94bbb8109f55c54f7e5f2fcd7b7a5b9d6320b05b268dd82616750d2df3a6d380f628ae7f9f82da4051c90f09075cf326d76b0eb0a27da57707ca792ef382b88d58792cd052b2d046f5a11cb145d3386e9a780abb08ba254e653aa78fb05ff46438118557343d95981c4f0bf3e7504b7d199305d2473fc0ee0ff7fd52e9681c664d50d31169709698e2e6e124531adb28f424308c1a74979cf67279556460d898d1060956c4da65b9211909d20f5ece84ff4c0365f147a8595609a28ac5b11c6c1e9de69b344725efb34dc595f6f2e8074f6", 0xe6}], 0x6}, 0x90)
connect$caif(r1, &(0x7f0000000080)=@dbg, 0x18)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0xffffffffffffb5e5, {{0x2, 0x4e23, @empty}}}, 0x88)
syz_genetlink_get_family_id$tipc(&(0x7f00000015c0)='TIPC\x00')
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0x200040, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000001640)={0x30, 0x5, 0x0, {0x0, 0x0, 0x5, 0x100000000}}, 0x30)

08:29:13 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:13 executing program 3 (fault-call:2 fault-nth:2):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:13 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x4201}, 0x0)

08:29:13 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:13 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:13 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x3, 0xc)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x6200, 0x0)
ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/53)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830014200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

08:29:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x6, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
unshare(0x800)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0)
ioctl$IOC_PR_REGISTER(r1, 0x401870cb, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x22201)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000000c0))

[  372.345521] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  372.382434] FAULT_INJECTION: forcing a failure.
[  372.382434] name failslab, interval 1, probability 0, space 0, times 0
08:29:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='cpusetuser\x00', &(0x7f0000000080)='%usereth0{\x00', &(0x7f00000000c0)='^\x00', &(0x7f0000000100)='/posix_acl_accesskeyring\x00', &(0x7f00000001c0)='vmnet1)\xfdeth1lolotrusted\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='mime_typehvmnet0selinuxtrusted\x00', &(0x7f0000000280)='^:security}\x00'], &(0x7f0000000400)=[&(0x7f0000000340)='ppp0eth0@Y:\x00', &(0x7f0000000380)='selinuxposix_acl_access\x00', &(0x7f00000003c0)='.eth1$keyring\x00'], 0x1000)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000016)

08:29:13 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:13 executing program 1 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  372.393777] net_ratelimit: 18 callbacks suppressed
[  372.393785] protocol 88fb is buggy, dev hsr_slave_0
[  372.393845] protocol 88fb is buggy, dev hsr_slave_1
08:29:13 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x5865}, 0x0)

08:29:13 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0)
eventfd2(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x1)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="00fb12d9095c62f0562a6c0601e3915b4fb7d5dc89d5c3dc5815f7a66025ef0428372d8e2eef18d49fb29b80ecade3828cbdafe6178fa192c75e0a519ce135a5ba7be7272be5be923be05090c8e562cad95a259d0cda0658ac84b8f81987564538cf8f293caacd6baac76d386e5424e1b232cb585bdabefe69973401b1d6f3836e517a30d803e37b327caa4060b67aa79c8aa0a729a41e4f41959ab0fd77f26f"], 0x6c, 0x3)

[  372.564964] CPU: 0 PID: 16933 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  372.571853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  372.581211] Call Trace:
[  372.583822]  dump_stack+0x172/0x1f0
[  372.587467]  should_fail.cold+0xa/0x15
[  372.591381]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  372.596507]  ? ___might_sleep+0x163/0x280
[  372.600666]  __should_failslab+0x121/0x190
[  372.604910]  should_failslab+0x9/0x14
[  372.608724]  kmem_cache_alloc+0x2b2/0x6f0
[  372.612916]  ? __save_stack_trace+0x8a/0xf0
[  372.617269]  __alloc_file+0x27/0x300
[  372.621001]  alloc_empty_file+0x72/0x170
[  372.625071]  path_openat+0xef/0x46e0
[  372.625103]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  372.625118]  ? kasan_slab_alloc+0xf/0x20
[  372.625132]  ? kmem_cache_alloc+0x11a/0x6f0
[  372.625144]  ? getname_flags+0xd6/0x5b0
[  372.625155]  ? getname+0x1a/0x20
[  372.625168]  ? do_sys_open+0x2c9/0x5d0
[  372.625180]  ? __x64_sys_open+0x7e/0xc0
[  372.625196]  ? do_syscall_64+0x103/0x610
[  372.625212]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  372.625245]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  372.625261]  ? debug_smp_processor_id+0x3c/0x280
[  372.625278]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  372.634087]  ? debug_smp_processor_id+0x3c/0x280
[  372.634106]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  372.634142]  ? __lockdep_free_key_range+0x120/0x120
[  372.634162]  ? __alloc_fd+0x430/0x530
[  372.634179]  do_filp_open+0x1a1/0x280
[  372.704907]  ? may_open_dev+0x100/0x100
[  372.708892]  ? lock_downgrade+0x880/0x880
[  372.713053]  ? kasan_check_read+0x11/0x20
[  372.717205]  ? do_raw_spin_unlock+0x57/0x270
[  372.721627]  ? _raw_spin_unlock+0x2d/0x50
[  372.725782]  ? __alloc_fd+0x430/0x530
[  372.729623]  do_sys_open+0x3fe/0x5d0
[  372.733349]  ? filp_open+0x80/0x80
[  372.736898]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  372.741662]  ? do_syscall_64+0x26/0x610
[  372.745640]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  372.751006]  ? do_syscall_64+0x26/0x610
[  372.754990]  __x64_sys_open+0x7e/0xc0
[  372.758804]  do_syscall_64+0x103/0x610
[  372.762699]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  372.767892] RIP: 0033:0x412011
[  372.771088] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  372.789990] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  372.797702] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  372.804972] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
08:29:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x6000}, 0x0)

[  372.812275] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  372.819547] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  372.826824] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
[  372.834986] protocol 88fb is buggy, dev hsr_slave_0
[  372.840149] protocol 88fb is buggy, dev hsr_slave_1
[  373.024835] protocol 88fb is buggy, dev hsr_slave_0
[  373.030013] protocol 88fb is buggy, dev hsr_slave_1
[  373.035178] protocol 88fb is buggy, dev hsr_slave_0
[  373.040288] protocol 88fb is buggy, dev hsr_slave_1
08:29:14 executing program 3 (fault-call:2 fault-nth:3):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:14 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:14 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x6558}, 0x0)

08:29:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="2400000000000000009c0f5b4e89090000000000000000000000000000000000000000001900000000220000000000000000"]})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x110, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r2 = socket$inet(0x2, 0x800, 0x2)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={<r3=>0x0, 0x8001}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x4b, 0x0, 0x1, 0x31, r3}, &(0x7f0000000280)=0x10)

08:29:14 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x8100}, 0x0)

08:29:14 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  373.312346] FAULT_INJECTION: forcing a failure.
[  373.312346] name failslab, interval 1, probability 0, space 0, times 0
[  373.385840] CPU: 0 PID: 16979 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  373.392719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  373.402081] Call Trace:
[  373.404695]  dump_stack+0x172/0x1f0
[  373.408348]  should_fail.cold+0xa/0x15
[  373.412258]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  373.417385]  ? ___might_sleep+0x163/0x280
[  373.421552]  __should_failslab+0x121/0x190
[  373.425809]  should_failslab+0x9/0x14
[  373.425827]  kmem_cache_alloc_trace+0x2d1/0x760
[  373.425841]  ? ___might_sleep+0x163/0x280
[  373.425861]  ? __might_sleep+0x95/0x190
[  373.442456]  apparmor_file_alloc_security+0x112/0x940
[  373.447684]  security_file_alloc+0x69/0xb0
[  373.451936]  __alloc_file+0xac/0x300
[  373.455673]  alloc_empty_file+0x72/0x170
[  373.459753]  path_openat+0xef/0x46e0
[  373.463497]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  373.468638]  ? kasan_slab_alloc+0xf/0x20
[  373.472718]  ? kmem_cache_alloc+0x11a/0x6f0
[  373.477048]  ? getname_flags+0xd6/0x5b0
[  373.481022]  ? getname+0x1a/0x20
[  373.484386]  ? do_sys_open+0x2c9/0x5d0
[  373.488277]  ? __x64_sys_open+0x7e/0xc0
[  373.492270]  ? do_syscall_64+0x103/0x610
[  373.496343]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  373.496362]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  373.496378]  ? debug_smp_processor_id+0x3c/0x280
[  373.496395]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  373.496411]  ? debug_smp_processor_id+0x3c/0x280
[  373.507304]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  373.507327]  ? __lockdep_free_key_range+0x120/0x120
[  373.507349]  ? __alloc_fd+0x430/0x530
08:29:14 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:14 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  373.507369]  do_filp_open+0x1a1/0x280
[  373.507386]  ? may_open_dev+0x100/0x100
[  373.507406]  ? lock_downgrade+0x880/0x880
[  373.548484]  ? kasan_check_read+0x11/0x20
[  373.552647]  ? do_raw_spin_unlock+0x57/0x270
[  373.557064]  ? _raw_spin_unlock+0x2d/0x50
[  373.561221]  ? __alloc_fd+0x430/0x530
[  373.565060]  do_sys_open+0x3fe/0x5d0
[  373.568789]  ? filp_open+0x80/0x80
[  373.572348]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  373.577111]  ? do_syscall_64+0x26/0x610
[  373.581097]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  373.586501]  ? do_syscall_64+0x26/0x610
[  373.590488]  __x64_sys_open+0x7e/0xc0
[  373.594301]  do_syscall_64+0x103/0x610
[  373.598196]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  373.598209] RIP: 0033:0x412011
[  373.598225] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  373.598233] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
08:29:14 executing program 2:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={<r1=>0x0, 0x1f, 0x8, 0x8, 0x4, 0xffff, 0xc81c, 0x401, {<r2=>0x0, @in6={{0xa, 0x4e23, 0xffffffffffff8000, @dev={0xfe, 0x80, [], 0x14}, 0x200000000000}}, 0x3, 0x0, 0x0, 0x5, 0xe9}}, &(0x7f0000000100)=0xb0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x7}}, 0x9, 0xfffffffffffff001, 0x10000, 0x1f, 0x20}, 0x98)
timer_create(0x7, &(0x7f0000000200)={0x0, 0xc}, &(0x7f0000000240)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x77359400}}, &(0x7f00000002c0))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x174, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc00000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2282}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x250c793ca626592b)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
socketpair(0x7, 0xf, 0x9, &(0x7f0000000580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$kcm(r7, &(0x7f0000001ac0)={&(0x7f00000005c0)=@nfc={0x27, 0x0, 0x2, 0x4}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)="6e9de0ca9f5e1d656f1ca1fe99e2a8417e70fa3600056dc180dca808f717500dafb9f1dd3e7ee3551c764d5ef99b39520ede0f35fd7c3ff97153c23d1759f1a19b91efb05286924ce6743cb77cc5a65fbdd42dd515cb58630544115ecfec7e631254818103886e55d56e05dfa3bcb186d4c716881d099fc8d1c296f8c0ad0297dcb31e57c400ac737bc4eef2d2b2f2a3db9e5d51b2c70020927fe2e6bc2d7da3", 0xa0}], 0x1, &(0x7f0000000740)=[{0xe8, 0x103, 0x2, "e6545f78474cc48683bbae81ef42f117d696b37ba2410c413603ec5bfbe7a909e2ee4507999dd2ffbff57d26bfd2db04ed7515afb370bd55fcf6847914d32da6b083272b8e94db087a4de7033fb2aa8e9dd45faa628cb85c255198123fa459246e2a84c18561b5cdfdc3a462f8cb3c47fa5e284d9e2eaf23d2027c65719f4c3d848ecd1608fb853e0bb360a5a42c7ecaf4a24063ab93ba5fdf7ca183f1c91723d5c85b5cabfa29d0cd1c70c4a8e6587b69ff8ea1d21360bf4c4b1ab290db9a1d2d87003e09013a16df19223a3a3c0c1e36"}, {0x58, 0x119, 0x9, "e0810f851a13ef54f7989a1f250a6f1c871dcde8cb2d58c226da816c211ed903d26505d3bb011c889d3b91d448253b59bc9fe1b16186e03eec9cad973509b8adff898c759dad"}, {0x20, 0x10d, 0x3f, "c445cc451635f066ae37b6dd63"}, {0x40, 0x1, 0x27f3, "6316ebb0f0537bb90202bbcec0a11e89b23ed5e9194061dbaa8472014bff26b9cc56f364d4cbd8aa5d99d4aef148da"}, {0x50, 0x11f, 0x5, "3a95ca6452af645a1e466b7a70fe554fb59e12319fcae492b1dcf16a42265e2e8f56e920b5cb115809129a69c9fa8bc4c82feb82dfe04ae4f25d1241"}, {0xb0, 0x0, 0x5, "8e38e392357d94b0f8fbde7995c26f3fb0879a06b97078cda9630a10188e2f009aa2bf26de0bb48be6e749eda6b8575691c4d44aad728d169754af97387982de48e4c4d4c039642fdd1ebd955cb67a10c8c27e846d120cb5060325cba1d5d28a6f96824c23a04445ce0eda048cd8ebdcf8fcb6177f37ba118fc4ffe97edd83eab0759d2e72d9f992340612d870b00f772aec4da0576233150d65a4"}, {0xc8, 0x0, 0x2, "4037eda48d0c67efd0434e5fbc75e18d4cdedc478f1bda3feeead2ce19014d63f7db137095686638311a437926dd0b0ba26e970904d95dc90386167051757230863c9ccdcedeba54e1eefc60592436c734965cef2bb059c18cd44d7aab1c91df51865fdf3bc2f11c6341207d3adb76682002949dab7e3ae92cf668146b2f528fa9f9d4246164c3e98cba1120c9b1c594ee3a685f850fb71709167cff3ce93f3e493b135f2af813fce2522c12bae301f15cc0"}, {0x1010, 0x129, 0x8, "b5a92cdd608918a07301301cb20c7e1b9c5f12f53cde682e000ffbf572fac5e48245d7fae1eb1031200857e15550b648582f8f6296cec5da5bfeac09cc170b9dae2637a120b2bafdda17269a5662e9a7165faa52de27cd97936731775c24014127a481cf42f5c6d1b7a2471b65858b45a9b9489455bbc4cc7c23e10b97f5dfdf0dc6702f38278e8c9c9feca056d22d20f6a288889cf388ab104745c3c8380481cf9ce288a4caaaa9c66d9b1b73c2209e57420daa0bef77fc87e6c794d0e295f9bdd39b7292f2fb33d8fc5d9532f8fee02e81143cfa828ff319d3ad70dc3222bbd72f580362eb49d8e7028bf65c4921db9d508a48252d7458d8b7efeeba4b9d76376ef07070691090ca5f1dbea13de8db992621f987c39329b9013130b655cba4faa8149ddb232756d4b866518636ce1091f4d2ee92359ba8699a8b36293a158a089294be3fb58b5a371278bdd18e95900bc132eda723d7869eafe9b10aece435cab6a4ef21ed02d2246c520d6f58da19c15f5e925e06f5b04f952532ccda23b9b783b2dbc85bcd9d3d2c33593583427f366ffa863c9ecb9bfa89f5c5fd884bdf612e902c15a95a777b5396a57f3d1a91ceae782a17bfa4ea98b13f6a34740f839533557d407356b02ea12a41baadeda09b2c6ba5776c50c5365f12cee7a86b2e666b1ee10bd93ce3d407d00dc90068e9ef6e8b472e12450b65bc5005a279db002c23b06983e71e90bb1ad76d2995c2069639038d1cefa4fabdc1c7312ad08f778593fa455aeb877db5731252fa681b609334107423ebdb3e5feb34668e70760d59cc0732188a49988abcc69df00d3b06e7c90b02f057ea2709b6032e0aa66e4b39379f9377c0c44b87cecc9bbd88088195ddabe1ce8a1b03e12061c507353d5c5f99593f7e6f3815b8a7767b8382237ce846e548a98e36299be936ff704121f1a66e101a38f79ca6b221234c28e62f613f0b806e54e241eedfaccbf3c9817f4136507eba20dd905b8cdfcca4f0c0bab93cddc7ab38043fd3d410acc1369a8cfb670c5ba3cc06f8ec6423ff68a014c861d0eef3bad593844d2a1aca9845ce823885d2f63011d9bb0b7801d7c3c8c21733423acebb59fbe4a67783aea74fbe8f7fda32ac968017227df61b57fa2a29b1bef999cff5c7e9dea05163e3ee841c24f390eb3872606cc3c341eae291b0af4c145de4152d608ce2224f7aaa80e98e837275d73a7c6c01e7b5872675a46cf28208715b3026570be97d4db9fe82f0892d0329aa7b8605f6e0f0bb4872e8fcd645ce513287ec741917a1af43dda0b5980d2c0e7d0524fe34e96d3b14a6088e06d22cb2d85cb83e107d3a559cd32e390d1cfa18e4fba25b57b4655a32b93a4ca49b40a094e2ddc1158de0f0b211987f1379723cefb8900706a17cff0769e244791ac36a6192984298a2f3755ae8fdf1ecf4298f601b0863300bffa1c1c04ad55f6050e6fdfc0defb5c453bdb76b0c38d746ac6698b80f2fb0ab1347a1c469543c5f2bac45d72402d0dc59dc09e93ea295571729177adbce04cdb3a72170adefec0513611c326785a577297f91f0840a8caf79380e4e98157f1d9e3c27e7d316ab941aac7865576b10fba5764e58a075fb6a079b6ba18b11de889ff15f0bf9eb0ceac037391e9e72e1343fdbf0af005973e39f9b58659f76beb1a25d75e1ceaef19ef4f5197ff67be85cf2243e43b0affd510c63516cd378025b0509213790b6418eb2d7c4c6c92c765a9685bcf8c16f8901fbd9fad3604df92a4687672e951aa28f62b92138621f3d2f3d653607da23656ac0327b7cca90de3e551599a611e3214e343410cf6feaa41eebab6cb489cb55a096a065b71deb80115133895c5cccf291838a2e44f1136e837f23f362fb04e137c73707e9a42afbbc417cdc728a536af728061cd1506e5251f8cd72b9b57c71248be6574c434041b1f02a5654b84621bff2b307c9a893fa259521ebce3792a52b6e4d590ee56f8d8df2c0cd4883c926b963a06b616975f07ed902d44e90150fff7aab6fac7e0a35a4762abd8160afa5884183b086c52c59e0011d08f6ca5c316413cb3095ecf7639ee3199ae3afa33105c2679477c3de6280a8be08a42819e445b75c524bcbbf0c6616dff8a5f498b457522d60e6487a649ad98a6507e42d28ce9edfbf45369609ab6b510c3e96e0f5921d998e33bada0d1994f1e8c7df1eff1b66192fb22ac69f0a791d65a6002e6795412b83427932796002034522db6f4564cd7242bf4bf7b5eb83878cd5a7751fa5a228c9a02b3dccee329b65d9637748948788212435807a51f2b98dbc8f15dcc20b88e3653cf904956ea896628d908dce268b6b16f8593f0d6c36e6552374f1d0d7b4247d11b54ce76afcaa0ceb18213ee37a1b462f6d42a326fb72823d7c1b236096ded63123825f23071a418bec5f1ec14fd2499c454af71d2804dc0c76f14c108c318801fdf3081532723a59aa0d39a12e092089a267017108ca018f3503a47cf17af0bdadf44c42068ff8fe687c54f3ab93005d062c07f84f6c33b5d5cb1cc4b85fb5c11ef3fccfa994bded933202f56e0661acbd361322b629787e21acb1f22ae0f9dfa121369035152716892f626f3cfee490725dc0e86932da3d7dffa81eeeaaa4de8927f251ba8f67f90de0dfd71ea493300a7b2103cc4176bc84c57dc89858910fda9e65fd5e6e1788e4b6736370400050bc0b55c8f804f22f7f21105854cf5d2a67dcbf305f99e25a05acb807de9dc9a70c728d63466e356056104944ff4c6bb581bf3b7198b528feafa1a609b8e3221773d473897a5cd388adab51d2c8197add966adf1909f73c6eb2a160996a9b16f78f8be6c9e27bf5047f6471d90d8f73957921400446565a169f347e50ec9ef8fbf2516a760088efa8a4f0bdd7a432592db6e72d2400453790e739dfe8f44d4cad25bdd715698d43601e99f4698ae6c93f0e3ddfd22a5b52926266640d4575acb9eb08371588da0abfcbe18290d023475ff40d374a4e711607654c9d87dd34e03be83492445df82547ef9ffd7965525f6e3e231012ec932094bca02c96f84b8258afe4178262056f46ef7af89ee6b3b932ca1d0d590e1adf6274e4ef839b141b54df526046bd35415779aa4ee1d07fc90674faa528c81fd2aca8ea97d2662482ec30d3b1f4ff55443edb71ad2fec1e1f1c1c08431b20dde964167bd1dd3edf11d31ca3d615005f1ab060837814bee7accc4376f6e273ef660d25be47ebf554bfe1d81d473c77c894d732c294152fc3d01c7e527571914114db07c2b10ca9edce9e77ae055529dc52ad81344a6c197d4f49a02dd20987a4e6ee6e573b2373aa6f6ca610afe79c2beb879607e35588353259ad374b3ea480d9723b1fd52e23d0804e8bfc0586b78227ebd3811055e792f6ff2ee4043cd91ae5b979f1956c7fc7fe1ca55145c63b651242406e935677f22a2479e5754d98891bf87652e9349dcb432c8f8a05778be8575d621d02dd2e40f2a47cd2a41ad6242e4e3859816d8664afd38295fe71693edc567125b3302af8345c8a95d0106317de29f44ed41d6fec6fdb2772d03b1f130c688627d326ac9b0979b0dbd436afe3b9205c198a57b2888fb83fd1d93c51a84fbd1e6e034738610a41a0148ee0f1a0c74378d8cc4df851da43f1f1dcefce65cac18659957a2624ca640856c70e4d654b044ee1ceb4072f74ded587f6b5857ca86652df3148b3e640e98de714f63ef6418abb1558cff3813125aa18ae4bc793287d63f9f679607dfe3635b92006ccee120f25b36905a3333f1bbc05f96eca1d7b04526e5b1f5349060d5a842370218ef874a8a47cd8cc23ab162db1fbfd28a249e6daf8e2b957e52a3839c6d454e9a2f0bca9ffa5df120e7bdbd90e170213fc6b1eee35d3e7bfe5d3edf792a8eb058ad399f79dbcac7bad50e441a2183215d25dcea3ecedbbd1291f39f834ccdf55ff76814d75aa6f3ac7f0e9cc1122916cf03b33caabfa5bd67b8e03b3e4f9a25c2354f8a8b641696cba4d3a1452098e3635dea2b42507b86b176df74b340cfccdb7c9e03d5836d35937f7e608df6cc86d6715ab87c6f68d9cb4fcb854cb696aa4ec8acd249acb279d72c71906d5238bbfd2cd744d502a8792c39daf7720893f8cdb6f30401406a0662e1b75e43b0f4ae31e9b9443701f8282f27de0498e0f8112b00ce95c8d92cecac3b6ad1d0a6cc09b0c158e7c8bfa040eff7c584e78f0a07e02158505af26068ad733b6353e4d8bd6108ec43eb9548c71080eaabfdd4bf11df9b5e50f83a252aebe01783f3d59e45017cc14078af4339ea6d1cac9b7f0b0bc31cbd3208d208b861555afc3feac57c8ac5dd89e4f52d8af2d6c6cbc702cf8b59b3f738c4c1881c0864f1199b25563e1397ac61d5be66b62a117d8cfe4626ca5145fd2f1894377a5daf394691c6f2c10d9204f07117ee36e63b1a8c2dc161bab278772c4121ea8152c6c3b892e08ba12f4a9a93c27e20388a7b3682d94b6142b8616464c199e22d86d068ea1531058a4579df589d58f2cc4319324ccac495caf2e22e976122526b2f6d05367404394feba175ec98ed645b50aac43953200abb6dd97d0a4d45bed853f242771fcc3b734a77f787efc288783880e696f55451979e920b377a7bff8c0b123cbafb94b150f98fe08536ba2f59cb5cc5cfc63ad7b72488c75b88362c0564abcff7cc5b418530517a5cc03477870b04e8e76985395fab86906d7442f65e72a08457bd4723ff521b92da95f33d866937447a4429d5aeeb4d27163da086218b285597ae817783e02e203bfdf4415a1c514ecc935fbc42c865b6dc5b280b8ab5f4d7db9e46e820ce65a521dbf6ef423a42f202083d064dd67ec515f7d914ebed6e1c8ba3623ec4a0a29ca6c54d2093a466552c3ae50dd0f6e38da4dbfa8e964bc189b033874b7c4c5daa9b06c9fc2daaeaf241fd1aae88089883cf994b674b87d24b218b9bec07e8451e421ce5bedb122ef9c47fa3c5092a3d7bf8d849c8fb59ffef3a47ea02837157d6324962a41ea3e916c59bf3a5dc61b825b96e53a6cb85263e9666923488887d70800b38771c0d3a30a776c65331b698a1c55f30ad150a46683cdc3242aa6887ca7c02cd0a16df6d4c723c6c69038ab07c9b04bb2e197680bb384fd26ee72bac8d9fb580ea708ea7d4e106b99d4a909d60390e06aca2af674d7eb758dc371895ff9bd188b2fe517cb0aeee5dd241d4b59e79e36402e7a73b6c9d375e6b29d572d0aad45e9f3f0d5aeb1ad1da3c800aadc1a53afcc78e42ddbce6e32da61b72fbe40eccca3174d1564da78195420de4c379fbbce14b5ee47ea3952278bbddc2a32c563db983f1b6ce55147cecee94794cb9efdbff1345bb8b191f05752e1a7309961951cb160c048c3caa0eedb4f5659fef37549bddc38bb91f9ac9d533818dd7a4ce96d2bef776596f81b6714da261f587bdd5ba00db0e4fa14073b249adb9ae109187e7a8e595e0ed6d912dc9d13c63cf44f7f25915290c184806edcd52837b35a3453414f9663c4081732799837fe30815d5e1865f1c4e9f914c584edd9c0afa206d758da7b7985ea6f3e0b877bdb90373eec7d725aee5d47df6125d345d6790246d20ea7c2efba5a0b71d0d56670c991e5b6a802a6752f2999c495e1cbe3ad9cf998c56d3df91aa40469f706e7129d83f26c854e769b931dbfe69b6006399e545f2ac337591e680abc238c6924c87b9142f52a5615fd349f886abb19f3705f37f2cfc92b7bc00a743f4134624fe00be6213d0615"}], 0x1378}, 0x20000000)
sendmsg$nl_xfrm(r7, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)=@getsadinfo={0x38, 0x23, 0x100, 0x70bd2b, 0x25dfdbfd, 0x0, [@tfcpad={0x8, 0x16, 0x101}, @proto={0x8, 0x19, 0xff}, @coaddr={0x14, 0xe, @in=@remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
signalfd(r6, &(0x7f0000001c00)={0x16}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000001c40)={r2, 0x800}, 0x8)
getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001d00)={'ip6gretap0\x00', {0x2, 0x4e20, @multicast1}})
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001d40)={0x7f, 0x7, 0x3000}, 0x4)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001d80))
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001dc0)=0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e00)={<r8=>0x0}, &(0x7f0000001e40)=0xc)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000001e80))
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000001ec0)={<r9=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001f00)={r9, 0x80000, r0})
signalfd(r0, &(0x7f0000001f40)={0xfffffffffffffffb}, 0x8)
syz_open_dev$loop(&(0x7f0000001f80)='/dev/loop#\x00', 0x5, 0x109300)
ptrace$getenv(0x4201, r8, 0x3, &(0x7f0000001fc0))
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000002000))
recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002040)=""/186, 0xba}], 0x1}, 0x80}, {{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002380)=[{&(0x7f00000021c0)=""/24, 0x18}, {&(0x7f0000002200)}, {&(0x7f0000002240)=""/237, 0xed}, {&(0x7f0000002340)=""/63, 0x3f}], 0x4, &(0x7f00000023c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000033c0)=@caif, 0x80, &(0x7f0000003800)=[{&(0x7f0000003440)=""/246, 0xf6}, {&(0x7f0000003540)=""/137, 0x89}, {&(0x7f0000003600)=""/40, 0x28}, {&(0x7f0000003640)=""/143, 0x8f}, {&(0x7f0000003700)=""/103, 0x67}, {&(0x7f0000003780)=""/71, 0x47}], 0x6, &(0x7f0000003880)=""/106, 0x6a}, 0x6}, {{&(0x7f0000003900)=@in, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003980)=""/143, 0x8f}, {&(0x7f0000003a40)=""/237, 0xed}, {&(0x7f0000003b40)=""/82, 0x52}, {&(0x7f0000003bc0)=""/159, 0x9f}, {&(0x7f0000003c80)=""/133, 0x85}], 0x5, &(0x7f0000003dc0)=""/133, 0x85}}], 0x4, 0x2000, &(0x7f0000003f80)={0x0, 0x1c9c380})
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1)
ptrace$cont(0xffffffffffffffff, r8, 0x7, 0xfff)

08:29:14 executing program 4:
r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setlease(r0, 0x400, 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
unshare(0x40000000)

[  373.633318] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  373.633329] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  373.633338] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  373.633349] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  373.633358] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
[  373.640982] protocol 88fb is buggy, dev hsr_slave_0
[  373.641037] protocol 88fb is buggy, dev hsr_slave_1
08:29:15 executing program 3 (fault-call:2 fault-nth:4):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:15 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xf000}, 0x0)

08:29:15 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x5421, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:15 executing program 2:
syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr, @multicast1}, @tipc=@payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x4, 0x3, 0x257f, 0x8001, &(0x7f0000000040)=[{}, {}, {}]})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x1, 0xffffffff, 0x91, 0xdbe})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x200000, 0x0)

08:29:15 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, &(0x7f0000000000), r1, 0x0, 0x8, 0x0)
r2 = geteuid()
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x1000)

08:29:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xf0ffff}, 0x0)

08:29:15 executing program 4:
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3, 0x41)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd2cd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804)
ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000000))

08:29:15 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:15 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x5450, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:15 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf2501000000140001000000000000fdfffffbffffffff00000014000100bec0653d4bd4ade42aa1c771e25911033f91f8a186afe9e9ad9c90104e35640300c72ccf417e57000800000000000000f55d886b3949c718b0bf3ff58cfd8c56ba568333e970fa82e67fb35bb8987b0000bc2a9344dd597fafc15801dfeafd15a26aa9ec182d52fb95a01cbf204504cb42a90e492cbf8b1494efa2d6652d0e8b7c320453b20f193e5b28289b84333bc160b7bd7d4ce13e18330c95924356c0a18cbc68fea40599343d0ed5bda33254a173ea2337bf94ce0d8df3642f2d7ebc7e7299c58c19d40f66d2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

[  374.206723] FAULT_INJECTION: forcing a failure.
[  374.206723] name failslab, interval 1, probability 0, space 0, times 0
[  374.308834] CPU: 1 PID: 17027 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  374.315725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  374.325091] Call Trace:
[  374.327718]  dump_stack+0x172/0x1f0
[  374.331376]  should_fail.cold+0xa/0x15
[  374.335286]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  374.340413]  ? ___might_sleep+0x163/0x280
[  374.344589]  __should_failslab+0x121/0x190
[  374.348844]  should_failslab+0x9/0x14
[  374.352655]  kmem_cache_alloc+0x2b2/0x6f0
[  374.356993]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  374.362550]  ? kasan_check_read+0x11/0x20
[  374.366726]  __d_alloc+0x2e/0x8c0
[  374.370248]  ? is_bpf_text_address+0xd3/0x170
[  374.374767]  d_alloc+0x4d/0x2b0
[  374.378064]  d_alloc_parallel+0xf4/0x1bc0
[  374.382229]  ? perf_trace_lock+0xeb/0x510
[  374.386386]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  374.391935]  ? debug_smp_processor_id+0x3c/0x280
[  374.396722]  ? __d_lookup_rcu+0x6c0/0x6c0
[  374.400877]  ? find_held_lock+0x35/0x130
[  374.404957]  ? __d_lookup+0x40c/0x760
[  374.408771]  ? lockdep_init_map+0x1be/0x6d0
[  374.413116]  ? lockdep_init_map+0x1be/0x6d0
[  374.417463]  __lookup_slow+0x1ab/0x500
[  374.421368]  ? vfs_unlink+0x500/0x500
[  374.425219]  lookup_slow+0x58/0x80
[  374.428779]  walk_component+0x74b/0x2000
[  374.432861]  ? refcount_dec_not_one+0x1f0/0x1f0
[  374.437545]  ? kasan_check_read+0x11/0x20
[  374.441724]  ? path_init+0x18f0/0x18f0
[  374.445632]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  374.451184]  ? security_inode_permission+0xd5/0x110
[  374.456222]  ? inode_permission+0xb4/0x570
[  374.460475]  link_path_walk.part.0+0x980/0x1340
[  374.465165]  ? walk_component+0x2000/0x2000
[  374.469510]  path_openat+0x202/0x46e0
[  374.473327]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  374.478438]  ? kasan_slab_alloc+0xf/0x20
[  374.482504]  ? kmem_cache_alloc+0x11a/0x6f0
[  374.487334]  ? getname_flags+0xd6/0x5b0
[  374.491313]  ? getname+0x1a/0x20
[  374.494693]  ? do_sys_open+0x2c9/0x5d0
[  374.498606]  ? debug_smp_processor_id+0x3c/0x280
[  374.503382]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  374.508933]  ? debug_smp_processor_id+0x3c/0x280
[  374.513709]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  374.518391]  ? __lockdep_free_key_range+0x120/0x120
[  374.523420]  ? __alloc_fd+0x430/0x530
[  374.527236]  do_filp_open+0x1a1/0x280
[  374.531048]  ? may_open_dev+0x100/0x100
[  374.535109]  ? simple_attr_release+0x50/0x50
[  374.539539]  ? do_raw_spin_unlock+0x57/0x270
[  374.543965]  ? _raw_spin_unlock+0x2d/0x50
[  374.548149]  do_sys_open+0x3fe/0x5d0
[  374.551879]  ? filp_open+0x80/0x80
[  374.555431]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  374.560207]  ? do_syscall_64+0x26/0x610
[  374.564184]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  374.569547]  ? do_syscall_64+0x26/0x610
[  374.573527]  __x64_sys_open+0x7e/0xc0
[  374.577334]  do_syscall_64+0x103/0x610
[  374.581228]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  374.586418] RIP: 0033:0x412011
[  374.589618] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
08:29:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x1000000}, 0x0)

[  374.608524] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  374.616245] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  374.623518] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  374.630784] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  374.638051] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  374.645317] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
08:29:16 executing program 3 (fault-call:2 fault-nth:5):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:16 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf2501000000140001000000000000fdfffffbffffffff00000014000100bec0653d4bd4ade42aa1c771e25911033f91f8a186afe9e9ad9c90104e35640300c72ccf417e57000800000000000000f55d886b3949c718b0bf3ff58cfd8c56ba568333e970fa82e67fb35bb8987b0000bc2a9344dd597fafc15801dfeafd15a26aa9ec182d52fb95a01cbf204504cb42a90e492cbf8b1494efa2d6652d0e8b7c320453b20f193e5b28289b84333bc160b7bd7d4ce13e18330c95924356c0a18cbc68fea40599343d0ed5bda33254a173ea2337bf94ce0d8df3642f2d7ebc7e7299c58c19d40f66d2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:16 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000010001900000007000000068100020a0009000100000000013ffe58", 0x1f}], 0x1)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0)
ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080))

08:29:16 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x5451, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x2000000}, 0x0)

08:29:16 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  374.990777] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
08:29:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x4000000}, 0x0)

08:29:16 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x5452, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  375.066831] FAULT_INJECTION: forcing a failure.
[  375.066831] name failslab, interval 1, probability 0, space 0, times 0
[  375.141816] CPU: 0 PID: 17066 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  375.148697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  375.148737] Call Trace:
[  375.148763]  dump_stack+0x172/0x1f0
[  375.148788]  should_fail.cold+0xa/0x15
[  375.148807]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  375.148834]  ? ___might_sleep+0x163/0x280
[  375.148862]  __should_failslab+0x121/0x190
[  375.182017]  should_failslab+0x9/0x14
[  375.185830]  kmem_cache_alloc+0x2b2/0x6f0
[  375.189988]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  375.195537]  ? kasan_check_read+0x11/0x20
[  375.195562]  __d_alloc+0x2e/0x8c0
[  375.195578]  ? is_bpf_text_address+0xd3/0x170
[  375.195616]  d_alloc+0x4d/0x2b0
[  375.195638]  d_alloc_parallel+0xf4/0x1bc0
[  375.195658]  ? perf_trace_lock+0xeb/0x510
[  375.195672]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  375.195689]  ? debug_smp_processor_id+0x3c/0x280
[  375.195715]  ? __d_lookup_rcu+0x6c0/0x6c0
[  375.207780]  ? find_held_lock+0x35/0x130
[  375.207799]  ? __d_lookup+0x40c/0x760
08:29:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x6000000}, 0x0)

[  375.207817]  ? lockdep_init_map+0x1be/0x6d0
[  375.229627]  ? lockdep_init_map+0x1be/0x6d0
[  375.237818]  __lookup_slow+0x1ab/0x500
[  375.237838]  ? vfs_unlink+0x500/0x500
[  375.237891]  lookup_slow+0x58/0x80
[  375.237908]  walk_component+0x74b/0x2000
[  375.237927]  ? refcount_dec_not_one+0x1f0/0x1f0
[  375.237948]  ? kasan_check_read+0x11/0x20
[  375.237968]  ? path_init+0x18f0/0x18f0
[  375.278299]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  375.283849]  ? security_inode_permission+0xd5/0x110
08:29:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x8000000}, 0x0)

[  375.288885]  ? inode_permission+0xb4/0x570
[  375.293137]  link_path_walk.part.0+0x980/0x1340
[  375.297832]  ? walk_component+0x2000/0x2000
[  375.302182]  path_openat+0x202/0x46e0
[  375.306002]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  375.311114]  ? kasan_slab_alloc+0xf/0x20
[  375.315189]  ? kmem_cache_alloc+0x11a/0x6f0
[  375.319515]  ? getname_flags+0xd6/0x5b0
[  375.323491]  ? getname+0x1a/0x20
[  375.326860]  ? do_sys_open+0x2c9/0x5d0
[  375.330761]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  375.336306]  ? debug_smp_processor_id+0x3c/0x280
[  375.341066]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  375.346623]  ? debug_smp_processor_id+0x3c/0x280
[  375.346644]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  375.346665]  ? __lockdep_free_key_range+0x120/0x120
[  375.346686]  ? __alloc_fd+0x430/0x530
[  375.356616]  do_filp_open+0x1a1/0x280
[  375.356633]  ? may_open_dev+0x100/0x100
[  375.356658]  ? simple_attr_release+0x50/0x50
[  375.356677]  ? do_raw_spin_unlock+0x57/0x270
[  375.356694]  ? _raw_spin_unlock+0x2d/0x50
[  375.356729]  do_sys_open+0x3fe/0x5d0
[  375.356750]  ? filp_open+0x80/0x80
[  375.356770]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  375.356787]  ? do_syscall_64+0x26/0x610
[  375.402258]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  375.407641]  ? do_syscall_64+0x26/0x610
[  375.411646]  __x64_sys_open+0x7e/0xc0
[  375.415471]  do_syscall_64+0x103/0x610
[  375.419371]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  375.424559] RIP: 0033:0x412011
08:29:16 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/173)

[  375.427771] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  375.446678] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  375.454395] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  375.461673] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  375.468944] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  375.476232] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  375.483520] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
08:29:17 executing program 3 (fault-call:2 fault-nth:6):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:17 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xa000000}, 0x0)

08:29:17 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x5460, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:17 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x4001, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x7ff, 0x2)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000200))
r1 = dup(0xffffffffffffff9c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001840), 0x4)
r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8bdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
timer_create(0x8, &(0x7f0000000000), 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0xffffff3e)
listen(r4, 0x20000000)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x722, 0x10001, 0x101, 0x1, 0x0, 0x545, 0x80000, 0x1, 0x9, 0xffff, 0x2, 0x6, 0x10001, 0x5, 0x1, 0x2, 0x556e, 0x3, 0x43706caf, 0x55b, 0xa1ac, 0x3f, 0x1dbc, 0xd127, 0x0, 0x1b4eeb81, 0xc6a, 0x7, 0x7, 0x9, 0x6, 0x9, 0x7, 0x1f, 0x100000000, 0x4, 0x0, 0x7673, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x3000, 0x56, 0xffff, 0x5, 0x4, 0x3, 0x2}, r3, 0xe, 0xffffffffffffff9c, 0x8)
r5 = socket$inet6(0xa, 0x6, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0xff00000000000000, 0x0, 0xffffff9f}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48)
connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000500)={0x4, 0x200, 0x8, 0x6f, &(0x7f0000000300)=""/111, 0x82, &(0x7f0000000380)=""/130, 0x9b, &(0x7f0000000440)=""/155})
accept4(r4, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)

08:29:17 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf2501000000140001000000000000fdfffffbffffffff00000014000100bec0653d4bd4ade42aa1c771e25911033f91f8a186afe9e9ad9c90104e35640300c72ccf417e57000800000000000000f55d886b3949c718b0bf3ff58cfd8c56ba568333e970fa82e67fb35bb8987b0000bc2a9344dd597fafc15801dfeafd15a26aa9ec182d52fb95a01cbf204504cb42a90e492cbf8b1494efa2d6652d0e8b7c320453b20f193e5b28289b84333bc160b7bd7d4ce13e18330c95924356c0a18cbc68fea40599343d0ed5bda33254a173ea2337bf94ce0d8df3642f2d7ebc7e7299c58c19d40f66d2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:17 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xc000000}, 0x0)

08:29:17 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x40049409, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  375.951420] FAULT_INJECTION: forcing a failure.
[  375.951420] name failslab, interval 1, probability 0, space 0, times 0
[  376.011742] CPU: 0 PID: 17101 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  376.018633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  376.028000] Call Trace:
[  376.030628]  dump_stack+0x172/0x1f0
[  376.034277]  should_fail.cold+0xa/0x15
[  376.038184]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  376.043312]  ? ___might_sleep+0x163/0x280
[  376.047483]  __should_failslab+0x121/0x190
[  376.051734]  should_failslab+0x9/0x14
[  376.055548]  kmem_cache_alloc+0x2b2/0x6f0
[  376.059718]  ? perf_trace_lock+0xeb/0x510
[  376.063878]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  376.069434]  ? debug_smp_processor_id+0x3c/0x280
[  376.074210]  __d_alloc+0x2e/0x8c0
[  376.077687]  d_alloc+0x4d/0x2b0
[  376.080976]  ? find_held_lock+0x35/0x130
[  376.085055]  d_alloc_parallel+0xf4/0x1bc0
[  376.089222]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  376.094781]  ? kasan_check_read+0x11/0x20
[  376.098952]  ? __d_lookup_rcu+0x6c0/0x6c0
[  376.103112]  ? __d_lookup+0x433/0x760
[  376.106923]  ? lookup_open+0x2c2/0x1b10
[  376.110905]  ? d_lookup+0xf9/0x260
[  376.114452]  ? lockdep_hardirqs_on+0x418/0x5d0
[  376.119055]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  376.124084]  ? d_lookup+0x19e/0x260
[  376.127733]  lookup_open+0x52a/0x1b10
[  376.131560]  ? vfs_link+0xb60/0xb60
[  376.135245]  path_openat+0x1eb4/0x46e0
[  376.139146]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  376.144259]  ? kasan_slab_alloc+0xf/0x20
[  376.148326]  ? kmem_cache_alloc+0x11a/0x6f0
[  376.152660]  ? getname_flags+0xd6/0x5b0
[  376.156673]  ? getname+0x1a/0x20
08:29:17 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  376.160046]  ? do_sys_open+0x2c9/0x5d0
[  376.163949]  ? debug_smp_processor_id+0x3c/0x280
[  376.168723]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  376.173411]  ? __lockdep_free_key_range+0x120/0x120
[  376.178499]  ? xhci_gen_setup+0x30/0xbb0
[  376.182580]  ? __alloc_fd+0x430/0x530
[  376.186415]  do_filp_open+0x1a1/0x280
[  376.190228]  ? may_open_dev+0x100/0x100
[  376.194229]  ? simple_attr_release+0x50/0x50
[  376.198659]  ? do_raw_spin_unlock+0x57/0x270
[  376.203078]  ? _raw_spin_unlock+0x2d/0x50
[  376.207260]  do_sys_open+0x3fe/0x5d0
[  376.210993]  ? filp_open+0x80/0x80
[  376.214555]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  376.219335]  ? do_syscall_64+0x26/0x610
[  376.223320]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  376.228695]  ? do_syscall_64+0x26/0x610
[  376.233905]  __x64_sys_open+0x7e/0xc0
[  376.237720]  do_syscall_64+0x103/0x610
[  376.241644]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  376.246841] RIP: 0033:0x412011
[  376.250046] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  376.268960] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  376.276678] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  376.283959] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  376.291241] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  376.298518] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  376.305795] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
08:29:17 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xe000000}, 0x0)

08:29:17 executing program 3 (fault-call:2 fault-nth:7):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:17 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:17 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf2501000000140001000000000000fdfffffbffffffff00000014000100bec0653d4bd4ade42aa1c771e25911033f91f8a186afe9e9ad9c90104e35640300c72ccf417e57000800000000000000f55d886b3949c718b0bf3ff58cfd8c56ba568333e970fa82e67fb35bb8987b0000bc2a9344dd597fafc15801dfeafd15a26aa9ec182d52fb95a01cbf204504cb42a90e492cbf8b1494efa2d6652d0e8b7c320453b20f193e5b28289b84333bc160b7bd7d4ce13e18330c95924356c0a18cbc68fea40599343d0ed5bda33254a173ea2337bf94ce0d8df3642f2d7ebc7e7299c58c19d40f66d2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:17 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x10000000}, 0x0)

08:29:17 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x4001, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x7ff, 0x2)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000200))
r1 = dup(0xffffffffffffff9c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001840), 0x4)
r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8bdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
timer_create(0x8, &(0x7f0000000000), 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0xffffff3e)
listen(r4, 0x20000000)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x722, 0x10001, 0x101, 0x1, 0x0, 0x545, 0x80000, 0x1, 0x9, 0xffff, 0x2, 0x6, 0x10001, 0x5, 0x1, 0x2, 0x556e, 0x3, 0x43706caf, 0x55b, 0xa1ac, 0x3f, 0x1dbc, 0xd127, 0x0, 0x1b4eeb81, 0xc6a, 0x7, 0x7, 0x9, 0x6, 0x9, 0x7, 0x1f, 0x100000000, 0x4, 0x0, 0x7673, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x3000, 0x56, 0xffff, 0x5, 0x4, 0x3, 0x2}, r3, 0xe, 0xffffffffffffff9c, 0x8)
r5 = socket$inet6(0xa, 0x6, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0xff00000000000000, 0x0, 0xffffff9f}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48)
connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000500)={0x4, 0x200, 0x8, 0x6f, &(0x7f0000000300)=""/111, 0x82, &(0x7f0000000380)=""/130, 0x9b, &(0x7f0000000440)=""/155})
accept4(r4, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)

08:29:18 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:18 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  376.809477] FAULT_INJECTION: forcing a failure.
[  376.809477] name failslab, interval 1, probability 0, space 0, times 0
08:29:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x3f000000}, 0x0)

[  376.907192] CPU: 0 PID: 17138 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  376.914059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  376.923414] Call Trace:
[  376.926018]  dump_stack+0x172/0x1f0
[  376.929672]  should_fail.cold+0xa/0x15
[  376.933578]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  376.938725]  ? ___might_sleep+0x163/0x280
[  376.942893]  __should_failslab+0x121/0x190
[  376.947146]  should_failslab+0x9/0x14
[  376.950960]  kmem_cache_alloc+0x2b2/0x6f0
[  376.955123]  ? perf_trace_lock+0xeb/0x510
[  376.959283]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  376.964830]  ? debug_smp_processor_id+0x3c/0x280
[  376.969620]  __d_alloc+0x2e/0x8c0
[  376.973089]  d_alloc+0x4d/0x2b0
[  376.976374]  ? find_held_lock+0x35/0x130
[  376.980446]  d_alloc_parallel+0xf4/0x1bc0
[  376.984635]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  376.990187]  ? kasan_check_read+0x11/0x20
[  376.994368]  ? __d_lookup_rcu+0x6c0/0x6c0
[  376.998536]  ? __d_lookup+0x433/0x760
[  377.002346]  ? lookup_open+0x2c2/0x1b10
[  377.006330]  ? d_lookup+0xf9/0x260
[  377.009880]  ? lockdep_hardirqs_on+0x418/0x5d0
[  377.014482]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  377.019509]  ? d_lookup+0x19e/0x260
[  377.023150]  lookup_open+0x52a/0x1b10
[  377.026978]  ? vfs_link+0xb60/0xb60
[  377.030662]  path_openat+0x1eb4/0x46e0
[  377.034563]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  377.039686]  ? kasan_slab_alloc+0xf/0x20
[  377.043758]  ? kmem_cache_alloc+0x11a/0x6f0
[  377.048129]  ? getname_flags+0xd6/0x5b0
[  377.052122]  ? getname+0x1a/0x20
[  377.055495]  ? do_sys_open+0x2c9/0x5d0
[  377.059398]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  377.064953]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  377.069639]  ? __lockdep_free_key_range+0x120/0x120
[  377.074675]  ? __alloc_fd+0x430/0x530
[  377.078489]  do_filp_open+0x1a1/0x280
[  377.082314]  ? may_open_dev+0x100/0x100
[  377.086313]  ? simple_attr_release+0x50/0x50
[  377.090738]  ? do_raw_spin_unlock+0x57/0x270
[  377.095154]  ? _raw_spin_unlock+0x2d/0x50
[  377.099336]  do_sys_open+0x3fe/0x5d0
[  377.103069]  ? filp_open+0x80/0x80
[  377.106638]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  377.111419]  ? do_syscall_64+0x26/0x610
[  377.115400]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  377.120773]  ? do_syscall_64+0x26/0x610
[  377.124766]  __x64_sys_open+0x7e/0xc0
[  377.128599]  do_syscall_64+0x103/0x610
[  377.132517]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  377.137712] RIP: 0033:0x412011
08:29:18 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  377.140917] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  377.159822] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  377.167543] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  377.174819] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  377.182099] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  377.189373] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  377.196647] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
08:29:18 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf2501000000140001000000000000fdfffffbffffffff00000014000100bec0653d4bd4ade42aa1c771e25911033f91f8a186afe9e9ad9c90104e35640300c72ccf417e57000800000000000000f55d886b3949c718b0bf3ff58cfd8c56ba568333e970fa82e67fb35bb8987b0000bc2a9344dd597fafc15801dfeafd15a26aa9ec182d52fb95a01cbf204504cb42a90e492cbf8b1494efa2d6652d0e8b7c320453b20f193e5b28289b84333bc160b7bd7d4ce13e18330c95924356c0a18cbc68fea40599343d0ed5bda33254a173ea2337bf94ce0d8df3642f2d7ebc7e7299c58c19d40f66d2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x8001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
r2 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000420000000000000000000300000000007427cd4200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58)
fdatasync(r2)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000180)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x2)
write$binfmt_elf32(r1, 0x0, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@local, <r3=>0x0}, &(0x7f0000000200)=0x14)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={r3, @broadcast, @broadcast}, 0xc)
fstatfs(r1, &(0x7f0000000080)=""/37)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
setgid(r4)

08:29:18 executing program 3 (fault-call:2 fault-nth:8):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:18 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x42010000}, 0x0)

08:29:18 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r0, &(0x7f0000000000))
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x18, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da67}, [@nested={0x4, 0x27}]}, 0x18}}, 0x0)

08:29:18 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf2501000000140001000000000000fdfffffbffffffff00000014000100bec0653d4bd4ade42aa1c771e25911033f91f8a186afe9e9ad9c90104e35640300c72ccf417e57000800000000000000f55d886b3949c718b0bf3ff58cfd8c56ba568333e970fa82e67fb35bb8987b0000bc2a9344dd597fafc15801dfeafd15a26aa9ec182d52fb95a01cbf204504cb42a90e492cbf8b1494efa2d6652d0e8b7c320453b20f193e5b28289b84333bc160b7bd7d4ce13e18330c95924356c0a18cbc68fea40599343d0ed5bda33254a173ea2337bf94ce0d8df3642f2d7ebc7e7299c58c19d40f66d2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

[  377.656521] netlink: 'syz-executor.4': attribute type 39 has an invalid length.
08:29:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  377.707963] FAULT_INJECTION: forcing a failure.
[  377.707963] name failslab, interval 1, probability 0, space 0, times 0
[  377.735258] CPU: 1 PID: 17177 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  377.739486] netlink: 'syz-executor.4': attribute type 39 has an invalid length.
[  377.742120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  377.742157] Call Trace:
[  377.742184]  dump_stack+0x172/0x1f0
[  377.742211]  should_fail.cold+0xa/0x15
[  377.769076]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  377.774197]  ? ___might_sleep+0x163/0x280
[  377.778359]  __should_failslab+0x121/0x190
[  377.782699]  ? proc_i_callback+0x30/0x30
[  377.786782]  should_failslab+0x9/0x14
[  377.790604]  kmem_cache_alloc+0x2b2/0x6f0
[  377.794765]  ? find_held_lock+0x35/0x130
[  377.798839]  ? tid_fd_mode+0x215/0x3f0
[  377.802744]  ? proc_i_callback+0x30/0x30
[  377.806818]  proc_alloc_inode+0x1c/0x1a0
[  377.810893]  alloc_inode+0x66/0x190
[  377.814533]  new_inode_pseudo+0x19/0xf0
[  377.818523]  new_inode+0x1f/0x40
[  377.821904]  proc_pid_make_inode+0x22/0x230
[  377.826245]  proc_fd_instantiate+0x58/0x1f0
[  377.830594]  proc_lookupfd_common+0x126/0x1c0
[  377.835108]  ? tid_fd_update_inode+0xf0/0xf0
[  377.839531]  ? tid_fd_revalidate+0x230/0x230
[  377.843958]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  377.848994]  proc_lookupfd+0x25/0x30
[  377.852731]  ? proc_lookupfd_common+0x1c0/0x1c0
08:29:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  377.857418]  lookup_open+0x6d4/0x1b10
[  377.861248]  ? vfs_link+0xb60/0xb60
[  377.864918]  path_openat+0x1eb4/0x46e0
[  377.868818]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  377.873931]  ? kasan_slab_alloc+0xf/0x20
[  377.878002]  ? kmem_cache_alloc+0x11a/0x6f0
[  377.882329]  ? getname_flags+0xd6/0x5b0
[  377.886310]  ? getname+0x1a/0x20
[  377.889684]  ? do_sys_open+0x2c9/0x5d0
[  377.893596]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  377.899196]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  377.903879]  ? __lockdep_free_key_range+0x120/0x120
[  377.908909]  ? __alloc_fd+0x430/0x530
[  377.908931]  do_filp_open+0x1a1/0x280
[  377.908948]  ? may_open_dev+0x100/0x100
[  377.908975]  ? simple_attr_release+0x50/0x50
[  377.916551]  ? do_raw_spin_unlock+0x57/0x270
[  377.916570]  ? _raw_spin_unlock+0x2d/0x50
[  377.916614]  do_sys_open+0x3fe/0x5d0
[  377.937226]  ? filp_open+0x80/0x80
[  377.940798]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  377.945568]  ? do_syscall_64+0x26/0x610
[  377.949564]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  377.954948]  ? do_syscall_64+0x26/0x610
08:29:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r0, &(0x7f0000000000))
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x18, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da67}, [@nested={0x4, 0x27}]}, 0x18}}, 0x0)

[  377.958941]  __x64_sys_open+0x7e/0xc0
[  377.962763]  do_syscall_64+0x103/0x610
[  377.966681]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  377.971875] RIP: 0033:0x412011
[  377.975079] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  377.993990] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  378.001701] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
08:29:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x60000000}, 0x0)

[  378.001712] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  378.001721] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  378.001732] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  378.001741] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
[  378.002043] net_ratelimit: 22 callbacks suppressed
[  378.002052] protocol 88fb is buggy, dev hsr_slave_0
[  378.048334] protocol 88fb is buggy, dev hsr_slave_1
08:29:19 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  378.064831] protocol 88fb is buggy, dev hsr_slave_0
[  378.069908] protocol 88fb is buggy, dev hsr_slave_1
[  378.179078] netlink: 'syz-executor.4': attribute type 39 has an invalid length.
08:29:19 executing program 3 (fault-call:2 fault-nth:9):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:19 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf2501000000140001000000000000fdfffffbffffffff00000014000100bec0653d4bd4ade42aa1c771e25911033f91f8a186afe9e9ad9c90104e35640300c72ccf417e57000800000000000000f55d886b3949c718b0bf3ff58cfd8c56ba568333e970fa82e67fb35bb8987b0000bc2a9344dd597fafc15801dfeafd15a26aa9ec182d52fb95a01cbf204504cb42a90e492cbf8b1494efa2d6652d0e8b7c320453b20f193e5b28289b84333bc160b7bd7d4ce13e18330c95924356c0a18cbc68fea40599343d0ed5bda33254a173ea2337bf94ce0d8df3642f2d7ebc7e7299c58c19d40f66d2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x65580000}, 0x0)

08:29:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:19 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf2501000000140001000000000000fdfffffbffffffff00000014000100bec0653d4bd4ade42aa1c771e25911033f91f8a186afe9e9ad9c90104e35640300c72ccf417e57000800000000000000f55d886b3949c718b0bf3ff58cfd8c56ba568333e970fa82e67fb35bb8987b0000bc2a9344dd597fafc15801dfeafd15a26aa9ec182d52fb95a01cbf204504cb42a90e492cbf8b1494efa2d6652d0e8b7c320453b20f193e5b28289b84333bc160b7bd7d4ce13e18330c95924356c0a18cbc68fea40599343d0ed5bda33254a173ea2337bf94ce0d8df3642f2d7ebc7e7299c58c19d40f66d2f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:19 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864c9, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:19 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd02, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x81000000}, 0x0)

08:29:19 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  378.601476] FAULT_INJECTION: forcing a failure.
[  378.601476] name failslab, interval 1, probability 0, space 0, times 0
[  378.682196] CPU: 1 PID: 17216 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  378.689068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  378.698438] Call Trace:
[  378.701078]  dump_stack+0x172/0x1f0
[  378.704736]  should_fail.cold+0xa/0x15
[  378.708644]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  378.713769]  ? ___might_sleep+0x163/0x280
[  378.717937]  __should_failslab+0x121/0x190
[  378.722191]  ? proc_i_callback+0x30/0x30
[  378.726276]  should_failslab+0x9/0x14
[  378.730086]  kmem_cache_alloc+0x2b2/0x6f0
[  378.734248]  ? find_held_lock+0x35/0x130
[  378.738318]  ? tid_fd_mode+0x215/0x3f0
[  378.742218]  ? proc_i_callback+0x30/0x30
[  378.746291]  proc_alloc_inode+0x1c/0x1a0
[  378.750363]  alloc_inode+0x66/0x190
[  378.754000]  new_inode_pseudo+0x19/0xf0
[  378.757978]  new_inode+0x1f/0x40
[  378.761344]  proc_pid_make_inode+0x22/0x230
[  378.765677]  proc_fd_instantiate+0x58/0x1f0
[  378.770009]  proc_lookupfd_common+0x126/0x1c0
[  378.774516]  ? tid_fd_update_inode+0xf0/0xf0
[  378.778931]  ? tid_fd_revalidate+0x230/0x230
[  378.783353]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  378.788383]  proc_lookupfd+0x25/0x30
[  378.792112]  ? proc_lookupfd_common+0x1c0/0x1c0
[  378.796790]  lookup_open+0x6d4/0x1b10
[  378.800622]  ? vfs_link+0xb60/0xb60
[  378.804292]  path_openat+0x1eb4/0x46e0
[  378.808197]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  378.813360]  ? kasan_slab_alloc+0xf/0x20
[  378.817432]  ? kmem_cache_alloc+0x11a/0x6f0
[  378.821765]  ? getname_flags+0xd6/0x5b0
[  378.825746]  ? getname+0x1a/0x20
[  378.829125]  ? do_sys_open+0x2c9/0x5d0
[  378.833030]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  378.838601]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  378.843286]  ? __lockdep_free_key_range+0x120/0x120
[  378.848394]  ? perf_trace_block_buffer+0x3f0/0x5c0
[  378.853343]  ? __alloc_fd+0x430/0x530
[  378.857160]  do_filp_open+0x1a1/0x280
[  378.860974]  ? may_open_dev+0x100/0x100
[  378.864977]  ? simple_attr_release+0x50/0x50
[  378.869403]  ? do_raw_spin_unlock+0x57/0x270
[  378.873821]  ? _raw_spin_unlock+0x2d/0x50
[  378.877999]  do_sys_open+0x3fe/0x5d0
08:29:20 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x88a8ffff}, 0x0)

08:29:20 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  378.881727]  ? filp_open+0x80/0x80
[  378.885279]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  378.890039]  ? do_syscall_64+0x26/0x610
[  378.894020]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  378.899389]  ? do_syscall_64+0x26/0x610
[  378.903392]  __x64_sys_open+0x7e/0xc0
[  378.907207]  do_syscall_64+0x103/0x610
[  378.907229]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  378.907241] RIP: 0033:0x412011
[  378.907257] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  378.907266] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  378.916330] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  378.916339] RDX: 00007f43fb131bdf RSI: 0000000000000002 RDI: 00007f43fb131bd0
[  378.916347] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  378.916356] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  378.916365] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
[  378.938727] protocol 88fb is buggy, dev hsr_slave_0
[  378.938790] protocol 88fb is buggy, dev hsr_slave_1
[  379.024859] protocol 88fb is buggy, dev hsr_slave_0
[  379.029961] protocol 88fb is buggy, dev hsr_slave_1
[  379.265745] protocol 88fb is buggy, dev hsr_slave_0
[  379.271212] protocol 88fb is buggy, dev hsr_slave_1
08:29:20 executing program 3 (fault-call:2 fault-nth:10):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:20 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x9effffff}, 0x0)

08:29:20 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x2000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:20 executing program 4:
getrandom(&(0x7f0000000440)=""/7, 0x7, 0x3)

08:29:20 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x400000)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:20 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:20 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x20, &(0x7f0000cadffc))

08:29:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xf0ffffff}, 0x0)

[  379.570136] FAULT_INJECTION: forcing a failure.
[  379.570136] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  379.581980] CPU: 0 PID: 17251 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  379.588830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  379.598189] Call Trace:
[  379.600797]  dump_stack+0x172/0x1f0
[  379.604449]  should_fail.cold+0xa/0x15
[  379.608361]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  379.613491]  ? debug_smp_processor_id+0x3c/0x280
[  379.618279]  ? perf_trace_lock+0xeb/0x510
[  379.622439]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  379.627996]  should_fail_alloc_page+0x50/0x60
[  379.632503]  __alloc_pages_nodemask+0x1a1/0x710
[  379.637190]  ? __alloc_pages_slowpath+0x2900/0x2900
[  379.642218]  ? find_held_lock+0x35/0x130
[  379.646297]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  379.651434]  cache_grow_begin+0x9c/0x8c0
[  379.655514]  ? getname_flags+0xd6/0x5b0
[  379.659510]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  379.665066]  kmem_cache_alloc+0x62d/0x6f0
[  379.669304]  ? task_work_run+0x118/0x1c0
[  379.673383]  ? find_held_lock+0x35/0x130
[  379.677462]  getname_flags+0xd6/0x5b0
[  379.681279]  getname+0x1a/0x20
[  379.684490]  do_sys_open+0x2c9/0x5d0
[  379.688261]  ? filp_open+0x80/0x80
[  379.691849]  ? blkcg_exit_queue+0x30/0x30
[  379.696017]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  379.700785]  ? do_syscall_64+0x26/0x610
[  379.704768]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  379.710160]  ? do_syscall_64+0x26/0x610
[  379.714161]  __x64_sys_open+0x7e/0xc0
08:29:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xffffa888}, 0x0)

[  379.717994]  do_syscall_64+0x103/0x610
[  379.721895]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  379.727090] RIP: 0033:0x412011
[  379.730297] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  379.749205] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  379.756922] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
08:29:21 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x200000000000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:21 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  379.764198] RDX: ffffffffffffffea RSI: 0000000000000000 RDI: 00007f43fb131bd0
[  379.771468] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  379.778745] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
[  379.786024] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
08:29:21 executing program 3 (fault-call:2 fault-nth:11):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:21 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xfffff000}, 0x0)

08:29:21 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:21 executing program 4:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x40046104, &(0x7f0000000200))
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={0x0, 0xffffffff, 0x6}, &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'nhpoly1305-generic\x00'}}, 0x0, 0x0)

08:29:21 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:21 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x2000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:21 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = timerfd_create(0x0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1)
timerfd_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00005cf000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil)

08:29:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xffffff7f}, 0x0)

[  380.475067] FAULT_INJECTION: forcing a failure.
[  380.475067] name failslab, interval 1, probability 0, space 0, times 0
08:29:21 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  380.610065] CPU: 0 PID: 17287 Comm: syz-executor.3 Not tainted 5.0.0+ #9
[  380.616970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  380.626338] Call Trace:
[  380.628950]  dump_stack+0x172/0x1f0
[  380.632628]  should_fail.cold+0xa/0x15
[  380.636547]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  380.641707]  ? __task_pid_nr_ns+0x1b1/0x530
[  380.646061]  __should_failslab+0x121/0x190
[  380.650320]  should_failslab+0x9/0x14
[  380.654144]  kmem_cache_alloc_trace+0x4b/0x760
[  380.658750]  ? kasan_check_read+0x11/0x20
[  380.662995]  proc_self_get_link+0x16f/0x1d0
[  380.667346]  link_path_walk.part.0+0xeec/0x1340
[  380.672040]  ? proc_ns_dir_readdir+0x570/0x570
[  380.676653]  ? walk_component+0x2000/0x2000
[  380.681009]  path_openat+0x202/0x46e0
[  380.684831]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  380.689954]  ? kasan_slab_alloc+0xf/0x20
[  380.694031]  ? kmem_cache_alloc+0x11a/0x6f0
[  380.698368]  ? getname_flags+0xd6/0x5b0
[  380.698381]  ? getname+0x1a/0x20
[  380.698396]  ? do_sys_open+0x2c9/0x5d0
[  380.698423]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  380.698439]  ? debug_smp_processor_id+0x3c/0x280
[  380.698456]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  380.698477]  ? __lockdep_free_key_range+0x120/0x120
[  380.698496]  ? __alloc_fd+0x430/0x530
[  380.698516]  do_filp_open+0x1a1/0x280
[  380.698529]  ? may_open_dev+0x100/0x100
[  380.698553]  ? kasan_check_read+0x11/0x20
[  380.698567]  ? do_raw_spin_unlock+0x57/0x270
[  380.698582]  ? _raw_spin_unlock+0x2d/0x50
[  380.698630]  do_sys_open+0x3fe/0x5d0
[  380.698646]  ? filp_open+0x80/0x80
[  380.698659]  ? blkcg_exit_queue+0x30/0x30
[  380.698678]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  380.698692]  ? do_syscall_64+0x26/0x610
[  380.698705]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  380.698717]  ? do_syscall_64+0x26/0x610
[  380.698736]  __x64_sys_open+0x7e/0xc0
[  380.698752]  do_syscall_64+0x103/0x610
[  380.698769]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  380.698781] RIP: 0033:0x412011
[  380.698796] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  380.698804] RSP: 002b:00007f43fb131bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  380.698817] RAX: ffffffffffffffda RBX: 00007f43fb131c90 RCX: 0000000000412011
[  380.698825] RDX: ffffffffffffffea RSI: 0000000000000000 RDI: 00007f43fb131bd0
[  380.698833] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000f
[  380.698840] R10: 0000000000000004 R11: 0000000000000293 R12: 00007f43fb1326d4
08:29:21 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x200000000000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:22 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  380.698848] R13: 00000000004c6c66 R14: 00000000004dc2e8 R15: 0000000000000004
08:29:22 executing program 3 (fault-call:2 fault-nth:12):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xffffff9e}, 0x0)

08:29:22 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:22 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:22 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:22 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:22 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:22 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4}, 0xc)

08:29:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xfffffff0}, 0x0)

08:29:22 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:22 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:22 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x200000000000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:23 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)

08:29:23 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:23 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:23 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0xff32, &(0x7f0000000140)=ANY=[], 0x1cd}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x324, 0x400000000000)
pipe(0x0)

08:29:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x100000000000000}, 0x0)

08:29:23 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:23 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:23 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x200000000000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:24 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='.d/3\x00')

08:29:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x200000000000000}, 0x0)

08:29:24 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0x7ff}})

08:29:24 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:24 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  383.024861] net_ratelimit: 18 callbacks suppressed
[  383.024870] protocol 88fb is buggy, dev hsr_slave_0
[  383.034954] protocol 88fb is buggy, dev hsr_slave_1
08:29:24 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x400000000000000}, 0x0)

08:29:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x77)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f00005c8f58), 0xeffdffff, 0x0, 0x0, 0x0)

08:29:24 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:24 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  383.184890] protocol 88fb is buggy, dev hsr_slave_0
[  383.190035] protocol 88fb is buggy, dev hsr_slave_1
08:29:24 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  383.424889] protocol 88fb is buggy, dev hsr_slave_0
[  383.430029] protocol 88fb is buggy, dev hsr_slave_1
[  383.435233] protocol 88fb is buggy, dev hsr_slave_0
[  383.440294] protocol 88fb is buggy, dev hsr_slave_1
08:29:25 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='/d/3\x00')

08:29:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x600000000000000}, 0x0)

08:29:25 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:25 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:25 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:25 executing program 4:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000003c0))
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)

08:29:25 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x800000000000000}, 0x0)

08:29:25 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:25 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:25 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xa00000000000000}, 0x0)

[  384.224917] protocol 88fb is buggy, dev hsr_slave_0
[  384.230155] protocol 88fb is buggy, dev hsr_slave_1
08:29:26 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/.\x00')

08:29:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:26 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000017, 0x0)

08:29:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xc00000000000000}, 0x0)

08:29:26 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:26 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xe00000000000000}, 0x0)

08:29:26 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:26 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:26 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x6c}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="ce494278b6bf11ae642bd2cfeeb2", 0x0, 0xffff}, 0x28)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

08:29:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x1000000000000000}, 0x0)

08:29:26 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd//\x00')

08:29:26 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:26 executing program 4:
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000800)={0x0, 0x8, 0xffffffff}, 0x8)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x40000)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x84000)
r2 = socket$inet(0x2b, 0x1, 0x0)
keyctl$invalidate(0x15, 0x0)
getrandom(&(0x7f0000000440)=""/246, 0x6, 0x3)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000006c0)={0xfffffffffffffffb, 0xfff, 0x6, 0x9, 0xfffffffffffffff8, 0x6a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000180)={0xa8b, 0x4})
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xfffffffffffffe97)
setsockopt$inet_mreqsrc(r2, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x6ed, 0x200, 0x0, 0x33}, 0x0)
r3 = dup(r2)
write$P9_RCLUNK(r3, &(0x7f0000000040)={0x7}, 0xffffffffffffffe0)

08:29:26 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x3f00000000000000}, 0x0)

08:29:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x4201000000000000}, 0x0)

08:29:27 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:27 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:27 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="066304400000000001634040"], 0x0, 0x0, 0x0})

08:29:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x6000000000000000}, 0x0)

[  385.970700] binder: BINDER_SET_CONTEXT_MGR already set
[  385.995930] binder: 17541:17542 ioctl 40046207 0 returned -16
[  386.015013] binder: 17541:17542 got reply transaction with no transaction stack
[  386.022757] binder: 17541:17542 transaction failed 29201/-71, size 0-0 line 2801
[  386.052562] binder: undelivered TRANSACTION_ERROR: 29201
08:29:27 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x02')

08:29:27 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:27 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
dup3(r1, r2, 0x0)

08:29:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x6558000000000000}, 0x0)

08:29:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:27 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:27 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x8100000000000000}, 0x0)

08:29:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:27 executing program 4:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000014c0)=ANY=[@ANYBLOB="66696c7465720000000055c4b4730f1e1e9c0e165d62000000000000000000000002000000001fffffbf00000e00000004000000e40300f6f70000000000000000000000f8"], 0x1)

08:29:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0)

08:29:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:28 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x04')

08:29:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:28 executing program 4:
ioperm(0x0, 0x7, 0x0)
clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(0xffffffffffffffff, r0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)

08:29:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x9effffff00000000}, 0x0)

08:29:28 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001040)='net/tcp6\x00')
read$FUSE(r1, 0x0, 0x9a)
close(r0)
read$FUSE(r1, &(0x7f0000000000), 0x118a)

08:29:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:28 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

08:29:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:29 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\'')

08:29:29 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:29 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:29 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80)
clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005800)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @local}}}}, &(0x7f0000005900)=0xe8)
r3 = dup3(0xffffffffffffffff, r1, 0x80000)
ioctl$VT_ACTIVATE(r3, 0x5606, 0xaf4)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r2}, 0x48)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@ipv4={[], [], @broadcast}, 0x43, r2})
exit(0xb0ffffff00000008)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180), 0xc)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'GPL\x00'}, 0x2b, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={<r4=>0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000640)={r4, 0x20, &(0x7f00000005c0)=[@in={0x2, 0x0, @rand_addr=0x100000000}, @in={0x2, 0x0, @remote}]}, &(0x7f0000000680)=0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz1'}, 0x4)

08:29:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

08:29:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xffffffff00000000}, 0x0)

08:29:29 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  388.385117] net_ratelimit: 22 callbacks suppressed
[  388.385128] protocol 88fb is buggy, dev hsr_slave_0
[  388.395301] protocol 88fb is buggy, dev hsr_slave_1
08:29:29 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0xfffffffffffff000}, 0x0)

[  388.464887] protocol 88fb is buggy, dev hsr_slave_0
[  388.470156] protocol 88fb is buggy, dev hsr_slave_1
08:29:29 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:30 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3/')

08:29:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x2}, 0x0)

08:29:30 executing program 4:
r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
close(r0)

08:29:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:30 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[  389.264840] protocol 88fb is buggy, dev hsr_slave_0
[  389.270013] protocol 88fb is buggy, dev hsr_slave_1
08:29:30 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:30 executing program 4:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=<r0=>0x0)
sched_setaffinity(r0, 0xfffffffffffffe0c, &(0x7f0000000400)=0x8000009)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x4)
ioctl$KDADDIO(r1, 0x4b34, 0x8000)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24000848}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="0080007dd176f05dfe"], 0x1}, 0x1, 0x0, 0x0, 0x20040001}, 0x4004)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x200)
getpgrp(0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
capget(&(0x7f00000001c0), 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
socket$packet(0x11, 0x2, 0x300)
fcntl$setflags(r3, 0x2, 0x0)
r5 = dup(r4)
io_cancel(0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000340)=0x7f, 0x4)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000240)=0x800001fd, 0x15f)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x2007fff)
sendfile(r5, r6, 0x0, 0x8000fffffffe)

08:29:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:30 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

[  389.424901] protocol 88fb is buggy, dev hsr_slave_0
[  389.430059] protocol 88fb is buggy, dev hsr_slave_1
[  389.664842] protocol 88fb is buggy, dev hsr_slave_0
[  389.670002] protocol 88fb is buggy, dev hsr_slave_1
08:29:31 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3H')

08:29:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x6}, 0x0)

08:29:31 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:31 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000540)=""/11, 0x485)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8)
dup2(r0, r1)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2400)

08:29:31 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8}, 0x0)

08:29:31 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xa}, 0x0)

08:29:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:32 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3L')

08:29:32 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:32 executing program 4:
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000540), 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c9c380}, 0x0, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xd4b9e9e)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

08:29:32 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:32 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xc}, 0x0)

08:29:32 executing program 4:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xbe)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

08:29:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xe}, 0x0)

08:29:32 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:32 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  390.977820] rpcbind: RPC call returned error 22
08:29:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0)

08:29:32 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:33 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3h')

08:29:33 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:33 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:33 executing program 4:
clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005800)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@ipv4={[], [], @local}}}}, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r0}, 0x48)
syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x0, 0x200000)
exit(0xb0ffffff00000008)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180), 0xc)
r1 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)='GPL\x00', 0xffffffffffffffff)
keyctl$instantiate(0xc, r1, &(0x7f0000000280)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'GPL\x00'}, 0x2b, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x20, &(0x7f00000005c0)=[@in={0x2, 0x0, @rand_addr=0x100000000}, @in={0x2, 0x0, @remote}]}, &(0x7f0000000680)=0x10)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000006c0)={0xa6, 0x29, 0x1, {0x4, [{{0x0, 0x2, 0x7}, 0x7, 0x1, 0x7, './file0'}, {{0x18, 0x3, 0x7}, 0x8, 0xffffffffffff0001, 0x7, './file0'}, {{0x4, 0x3, 0x3}, 0x6fed, 0x101, 0x7, './file0'}, {{0x1, 0x2, 0x8}, 0x101, 0x100000001, 0xfffffc3c, './file0'}, {{0x40}, 0x4a0d, 0x5, 0x7, './file0'}]}}, 0xa6)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz1'}, 0x4)

08:29:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x60}, 0x0)

08:29:33 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xf0}, 0x0)

08:29:33 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:33 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:33 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x142}, 0x0)

08:29:33 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:33 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3l')

08:29:33 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x600}, 0x0)

08:29:33 executing program 4:
openat$vhci(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vhci\x00', 0x0)
socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58)
openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0xffffffff08000000, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0))

08:29:33 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:33 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:33 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xa00}, 0x0)

08:29:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:34 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xc00}, 0x0)

08:29:34 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3t')

[  393.424940] net_ratelimit: 18 callbacks suppressed
[  393.424949] protocol 88fb is buggy, dev hsr_slave_0
[  393.435061] protocol 88fb is buggy, dev hsr_slave_1
08:29:34 executing program 4:

08:29:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:34 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xe00}, 0x0)

[  393.584843] protocol 88fb is buggy, dev hsr_slave_0
[  393.589986] protocol 88fb is buggy, dev hsr_slave_1
08:29:34 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:34 executing program 4:

08:29:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x3f00}, 0x0)

08:29:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:35 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  393.834855] protocol 88fb is buggy, dev hsr_slave_0
[  393.840047] protocol 88fb is buggy, dev hsr_slave_1
[  393.845253] protocol 88fb is buggy, dev hsr_slave_0
[  393.850319] protocol 88fb is buggy, dev hsr_slave_1
08:29:35 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:35 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3z')

08:29:35 executing program 4:
r0 = epoll_create1(0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180))
dup2(r1, r0)

08:29:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4201}, 0x0)

08:29:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:35 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:35 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/11, 0xb)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380))
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
dup2(r0, r1)
syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

08:29:35 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x5865}, 0x0)

08:29:35 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  394.624892] protocol 88fb is buggy, dev hsr_slave_0
[  394.630041] protocol 88fb is buggy, dev hsr_slave_1
08:29:36 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\xc0')

08:29:36 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

08:29:36 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
getgid()
listen(r1, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

08:29:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:36 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:36 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x6558}, 0x0)

08:29:36 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:36 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001040)='net/tcp6\x00')
read$FUSE(r1, 0x0, 0x9a)
read$FUSE(r1, &(0x7f0000000000), 0x118a)

08:29:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:37 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:37 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:37 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8100}, 0x0)

08:29:37 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:37 executing program 4:

08:29:37 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:37 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:37 executing program 4:

08:29:37 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:37 executing program 4:

08:29:37 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:37 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xf000}, 0x0)

08:29:38 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:38 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:38 executing program 4:

08:29:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)

08:29:38 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:38 executing program 4:

08:29:38 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:38 executing program 4:

08:29:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

08:29:38 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:39 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3m')

08:29:39 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:39 executing program 4:

08:29:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

08:29:39 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:39 executing program 4:

08:29:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

08:29:39 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:39 executing program 4:

08:29:39 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:39 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

08:29:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:39 executing program 4:

08:29:39 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:39 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:40 executing program 4:

08:29:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  398.785301] net_ratelimit: 22 callbacks suppressed
[  398.785360] protocol 88fb is buggy, dev hsr_slave_0
[  398.795949] protocol 88fb is buggy, dev hsr_slave_1
08:29:40 executing program 4:

08:29:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

08:29:40 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  398.864877] protocol 88fb is buggy, dev hsr_slave_0
[  398.869983] protocol 88fb is buggy, dev hsr_slave_1
08:29:40 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:40 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xa000000}, 0x0)

08:29:40 executing program 4:

08:29:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:40 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:40 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:40 executing program 4:

[  399.664858] protocol 88fb is buggy, dev hsr_slave_0
[  399.670005] protocol 88fb is buggy, dev hsr_slave_1
08:29:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xc000000}, 0x0)

08:29:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:41 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:41 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:41 executing program 4:

[  399.824914] protocol 88fb is buggy, dev hsr_slave_0
[  399.830067] protocol 88fb is buggy, dev hsr_slave_1
[  400.064981] protocol 88fb is buggy, dev hsr_slave_0
[  400.070134] protocol 88fb is buggy, dev hsr_slave_1
08:29:41 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:41 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xe000000}, 0x0)

08:29:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:41 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:41 executing program 4:

08:29:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)

08:29:41 executing program 4:

08:29:41 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0)

08:29:41 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:42 executing program 4:

08:29:42 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:42 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:42 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0)

08:29:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x40000)
close(r0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3})
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/192)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000200)={0x5, 0x0, 0x3f}, 0xc)

08:29:42 executing program 4:

08:29:42 executing program 4:

08:29:42 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:42 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x42010000}, 0x0)

08:29:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x40)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x280000, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[]}, 0x1, 0x0, 0x0, 0x4814}, 0x40010)

08:29:42 executing program 4:

08:29:43 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3A')

08:29:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)

08:29:43 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:43 executing program 1:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x22081)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:43 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:43 executing program 4:

08:29:43 executing program 4:

08:29:43 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x65580000}, 0x0)

08:29:43 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:43 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x400000, 0x0)
dup2(r0, r0)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000002440)={0x2, 0x0, @multicast1}, &(0x7f0000002480)=0x10)
r2 = accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f00000024c0)=0x10)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x5}, 0x8)
ioctl(r1, 0x10000, &(0x7f0000000280)="960f17294cd1d08c22b4ba546213522b051aba2f4996aeec18d6ccbe89cb0e26d7dcc1c3c20bc7c0923f62d0650b2ef164f5f4354cd9218e19a605c9a0da5aa551c39b72fce4c069c8a4bdc781b5f1ae2b641e1cfc9d93258a23c821974ff5d7c88329f41ff1d7787049799bbbc79eb5db863ea6defdde4be7fd282d8ffad0b5d2796f6a69dcc4c6ea93fe2c195b7baa99ab9c27a4e128677f00bfff5f96051593879faa37f286fbb21cbc7000db26a0314d72")
r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x210000)
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431)
close(r3)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x81000000}, 0x0)

[  402.436602] INFO: trying to register non-static key.
[  402.441749] the code is fine but needs lockdep annotation.
[  402.447375] turning off the locking correctness validator.
[  402.453010] CPU: 1 PID: 18290 Comm: syz-executor.1 Not tainted 5.0.0+ #9
[  402.459852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  402.469208] Call Trace:
[  402.471815]  dump_stack+0x172/0x1f0
[  402.475465]  register_lock_class+0x16d9/0x1870
[  402.480233]  ? add_lock_to_list.isra.0+0x1cd/0x3a0
[  402.485692]  ? save_trace+0xe0/0x290
[  402.489419]  ? is_dynamic_key+0x1c0/0x1c0
[  402.493584]  ? check_prev_add.constprop.0+0x8c7/0x23c0
[  402.498891]  __lock_acquire+0xf9/0x3fb0
[  402.502876]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  402.508425]  ? debug_smp_processor_id+0x3c/0x280
[  402.513196]  ? perf_trace_lock_acquire+0xf5/0x580
[  402.518043]  ? graph_lock+0x7b/0x200
[  402.521772]  ? mark_held_locks+0xf0/0xf0
[  402.525839]  ? perf_trace_lock+0x510/0x510
[  402.530087]  ? debug_smp_processor_id+0x3c/0x280
[  402.534945]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  402.540492]  ? debug_smp_processor_id+0x3c/0x280
[  402.545264]  lock_acquire+0x16f/0x3f0
[  402.549076]  ? __flush_work+0x61a/0x840
[  402.549361] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  402.553066]  __flush_work+0x640/0x840
[  402.553080]  ? __flush_work+0x61a/0x840
[  402.553159]  ? try_wait_for_completion+0x9a/0xd0
[  402.553176]  ? insert_work+0x3a0/0x3a0
[  402.559733] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  402.563383]  ? mark_held_locks+0xa4/0xf0
[  402.563400]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  402.563420]  ? refcount_sub_and_test_checked+0x154/0x200
[  402.568992] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  402.572129]  ? refcount_dec_not_one+0x1f0/0x1f0
[  402.572243]  ? __drm_atomic_helper_crtc_destroy_state+0xf3/0x340
[  402.572263]  flush_work+0x18/0x20
[  402.576513] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  402.585691]  vkms_atomic_crtc_destroy_state+0x2d/0x40
[  402.585737]  drm_atomic_state_default_clear+0x37c/0xd60
[  402.641263]  drm_atomic_state_clear+0x9d/0xc0
[  402.645754]  __drm_atomic_state_free+0x3c/0xf0
[  402.650351]  drm_atomic_helper_set_config+0xe5/0x160
[  402.655540]  drm_mode_setcrtc+0x613/0x1490
[  402.659779]  ? __schedule+0x81f/0x1cc0
[  402.663666]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  402.669202]  ? drm_mode_getcrtc+0x870/0x870
[  402.673515]  ? __lockdep_free_key_range+0x120/0x120
[  402.678528]  ? drm_dev_exit+0x22/0x60
[  402.682314]  ? find_held_lock+0x35/0x130
[  402.686365]  ? drm_dev_exit+0x22/0x60
[  402.690202]  ? drm_lease_owner+0x45/0x60
[  402.694262]  ? drm_is_current_master+0x5c/0x140
[  402.698938]  drm_ioctl_kernel+0x23b/0x2e0
[  402.703080]  ? drm_mode_getcrtc+0x870/0x870
[  402.707408]  ? drm_setversion+0x8c0/0x8c0
[  402.711556]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  402.717133]  ? _copy_from_user+0xdd/0x150
[  402.721279]  drm_ioctl+0x545/0xa50
[  402.724815]  ? drm_mode_getcrtc+0x870/0x870
[  402.729134]  ? drm_version+0x3d0/0x3d0
[  402.733044]  ? __lockdep_free_key_range+0x120/0x120
[  402.738071]  ? __fget+0x340/0x540
[  402.741514]  ? drm_version+0x3d0/0x3d0
[  402.745392]  do_vfs_ioctl+0xd6e/0x1390
[  402.749272]  ? ioctl_preallocate+0x210/0x210
[  402.753674]  ? __fget+0x367/0x540
[  402.757122]  ? ksys_dup3+0x3e0/0x3e0
[  402.760827]  ? nsecs_to_jiffies+0x30/0x30
[  402.764969]  ? security_file_ioctl+0x93/0xc0
[  402.769371]  ksys_ioctl+0xab/0xd0
[  402.772814]  __x64_sys_ioctl+0x73/0xb0
[  402.776696]  do_syscall_64+0x103/0x610
[  402.780574]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  402.785762] RIP: 0033:0x457f29
[  402.788943] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  402.807851] RSP: 002b:00007f0635c54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  402.815549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29
[  402.822823] RDX: 0000000020000000 RSI: 00000000c06864a2 RDI: 0000000000000003
[  402.830083] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  402.837369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0635c556d4
[  402.844632] R13: 00000000004bfc39 R14: 00000000004d16f8 R15: 00000000ffffffff
[  402.878535] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  402.885221] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
08:29:44 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:44 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0)

08:29:44 executing program 4:

08:29:44 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x5, {0x9, 0x1, 0x0, 0x2b4, 0x0, 0x0, 0xfffffffffffffffc, 0xe2, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a58e4202c64122b0a"}})

08:29:44 executing program 4:

[  403.144367] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  403.154993] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
08:29:44 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

08:29:44 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:44 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x337081, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{}, {<r1=>0x0}]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={r1, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000280)={{0x0, 0xd000, 0xf, 0x6, 0x0, 0xffffffffffffffe0, 0x2, 0x5, 0x8, 0x3bc, 0x89e1, 0x80}, {0x2000, 0x6000, 0xd, 0x6, 0x4, 0x20, 0x100, 0x6, 0x6, 0xc4, 0x1, 0x8}, {0x6006, 0x3001, 0xe, 0x7fff, 0x0, 0xffffffffffffd9a7, 0xfffffffffffffffc, 0x1f, 0x0, 0x1, 0x54b0, 0x6}, {0x106000, 0x0, 0xa, 0x100, 0x9, 0xfffffffffffffc01, 0x41f5f788, 0x1, 0x6, 0x800, 0x0, 0x7fff}, {0x2000, 0x3000, 0xe, 0x7, 0x67c, 0x6, 0x3ff00000, 0xfffffffffffffff7, 0x80000001, 0xffde, 0x2d83adc5, 0x7}, {0x0, 0x2, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x3, 0x1, 0x100, 0x6, 0x7, 0x20}, {0x2000, 0x100005, 0x4, 0x2, 0xfffffffffffffff7, 0x40, 0xffffffff7fffffff, 0x20, 0x1, 0x0, 0xfff, 0x100000000}, {0x1, 0xd000, 0xb, 0x5, 0x339a, 0x7, 0xd7, 0x0, 0x3, 0x3, 0x8, 0x6}, {0x11f000}, {0x3000, 0x6000}, 0x40000, 0x0, 0x2, 0x1, 0x0, 0x8000, 0x102000, [0x7dc, 0x9, 0x8e05, 0x1ff]})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000080)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x6, 0x4000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7ffd, 0x0, 0x4, 0x0, "77100b6a1cc076a15a400000005b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  403.212332] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  403.241874] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
08:29:44 executing program 4:

[  403.329969] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  403.372938] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  403.392461] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  403.404671] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  403.427953] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  403.442225] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  403.462234] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  403.476613] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  403.503270] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  403.519087] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  403.540153] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  403.549917] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  403.565932] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  403.572473] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  403.585908] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  403.592467] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  403.824860] net_ratelimit: 18 callbacks suppressed
[  403.824869] protocol 88fb is buggy, dev hsr_slave_0
[  403.834954] protocol 88fb is buggy, dev hsr_slave_1
08:29:45 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:45 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

08:29:45 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:45 executing program 1:
r0 = request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/dri/card#\x00', 0xfffffffffffffffc)
request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='/dev/dri/card#\x00', r0)
r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:45 executing program 4:

[  403.984841] protocol 88fb is buggy, dev hsr_slave_0
[  403.989948] protocol 88fb is buggy, dev hsr_slave_1
[  404.004885] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  404.011377] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
08:29:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0)

08:29:45 executing program 4:

08:29:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={<r2=>0x0, 0x1}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8)
prctl$PR_SET_SECUREBITS(0x1c, 0x2a)
write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x6}, 0xffff}}, 0x18)

08:29:45 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:45 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  404.086308] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  404.102550] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
08:29:45 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x77)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f00005c8f58), 0xeffdffff, 0x0, 0x0, 0x0)

[  404.160738] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  404.186009] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  404.219151] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  404.225752] protocol 88fb is buggy, dev hsr_slave_0
[  404.225800] protocol 88fb is buggy, dev hsr_slave_1
[  404.225884] protocol 88fb is buggy, dev hsr_slave_0
[  404.225919] protocol 88fb is buggy, dev hsr_slave_1
[  404.259549] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  404.270116] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  404.278348] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  404.288446] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  404.295022] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  404.310662] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  404.317267] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  404.327194] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  404.333715] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  404.343682] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  404.350319] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  404.360621] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  404.367141] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
08:29:46 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0)

08:29:46 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0xfffffffffffffffd)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:46 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:46 executing program 4:

08:29:46 executing program 4:

[  404.895986] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  404.902492] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
08:29:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

08:29:46 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x8d2, 0x400001)
ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381)

[  404.954688] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  404.994195] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
08:29:46 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  405.034821] protocol 88fb is buggy, dev hsr_slave_0
[  405.039944] protocol 88fb is buggy, dev hsr_slave_1
[  405.052322] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
08:29:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  405.084056] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  405.144519] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  405.163294] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  405.165425] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  405.177438] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  405.185786] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  405.200013] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  405.206456] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  405.216526] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  405.226889] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  405.233401] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  405.243414] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  405.252644] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
08:29:47 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

08:29:47 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffa, 0x60000)
ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000000c0)={[0x100000, 0x5000, 0x1f004, 0x10000], 0x4, 0x2, 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:47 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80000, 0x0)
write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="61c83d00fd1c6ab800737ef30825000003000000000000004c01000000000000000030f9ed07020400000001000000800000004f2e9aa3a39d781bde4bc15743a7667db88f12ce7f525f688c3dbf4a1091e5ea29c5593613adbb7368f446fdb2b22f2e8bccb55a67a4ec3ab5084b18892624ea36760570add86d46f901e90aabf3905fc2941de8d4917c82fe5915caad0657ad27b2f3731b1d99d716d15abd4f6e7915ada960ee05a5d7598f52bfee977c861c422ddb8346f3800e9f0cec90436f8df7a1cc9d76caf3d53af8c5f9e1afa721ee9afc9e722b5351"], 0x59)

[  405.751756] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  405.768491] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
08:29:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

08:29:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  405.834029] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  405.852378] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  405.901451] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  405.935851] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
08:29:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80000, 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r2 = dup(r0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080))

08:29:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  405.953588] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
08:29:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0)

[  405.998016] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  406.007850] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  406.014295] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  406.069905] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  406.094895] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  406.105162] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  406.111614] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  406.122836] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  406.129529] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  406.144711] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  406.154868] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  406.165040] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  406.171492] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  406.182938] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  406.189674] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  406.219623] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  406.226786] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  406.252157] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  406.258575] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  406.286304] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  406.293110] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  406.314229] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  406.321936] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:47 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:47 executing program 1:
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x400040)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100))
r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x20000, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:47 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0)

[  406.645089] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  406.651573] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
08:29:47 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0)

08:29:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x80200c72e, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140), 0x4)

08:29:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  406.716343] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
08:29:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  406.769803] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  406.825964] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  406.849834] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
08:29:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  406.886745] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  406.914861] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  406.935976] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  406.953523] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  406.963672] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  406.981730] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  407.019938] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  407.040509] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  407.066397] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  407.080829] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  407.153569] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  407.160427] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  407.194532] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  407.202411] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  407.209899] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  407.224941] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:48 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x569e, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000300))
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4)

08:29:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x400000000000000}, 0x0)

08:29:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:48 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  407.523941] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  407.532850] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
08:29:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x600000000000000}, 0x0)

[  407.580473] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  407.609217] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
08:29:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, "77100b6a1cc075a15ad9f0552f5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:48 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  407.685669] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  407.723721] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
08:29:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:49 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0x2004)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000696a544be8cfab44a9684fd24164dbae8235010005000000050051203bbd"], &(0x7f00000001c0)=0x1)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  407.763209] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  407.793733] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  407.816251] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  407.822690] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  407.846938] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  407.853390] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  407.865483] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  407.871928] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  407.920165] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  407.931921] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
08:29:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  408.023797] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  408.030175] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  408.067671] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  408.074118] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  408.077280] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  408.089985] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:49 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x97')

08:29:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x800000000000000}, 0x0)

08:29:49 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:49 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2000, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x80)
r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001f, 0x0, 0x400000, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x5, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={0x1, 0x0, 0x2080, {0x13000, 0xf002, 0x1}, [], "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", "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"})

08:29:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0)

08:29:49 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x880, 0x0)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
r2 = socket$vsock_dgram(0x28, 0x2, 0x0)
r3 = msgget(0x2, 0x14)
msgctl$IPC_STAT(r3, 0x2, &(0x7f00000003c0)=""/120)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r2, 0x1f, 0x57, &(0x7f0000000100)="8d1c30e83e55ffc7d2d4546d0a2178f58e86d9b8b606b5e99cb14430af513e1fc4ce4e014a7a3b24011b0a37ada802c7138fa22e307aae86b65496a1b5dd888ca3ad4ec9c6d0c6adc1805d8f1f53dca41a5593aa1b212a", 0x5, 0x2, 0x0, 0x1000, 0x3, 0x2, 0x40, 'syz1\x00'})
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000280)=0x2)
r4 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff)
keyctl$assume_authority(0x10, r4)
openat(r1, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x8)
r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  408.421247] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  408.434157] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
08:29:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xc00000000000000}, 0x0)

08:29:49 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
socket$isdn(0x22, 0x3, 0x668c7fd6ad60891)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x81, 0x4, 0x7, 0x9, 0x9, 0x80, 0x4})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  408.498408] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  408.533762] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  408.593219] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  408.618265] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
08:29:49 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  408.649480] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  408.673221] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  408.740366] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  408.765356] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  408.785939] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  408.792382] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  408.805745] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  408.812332] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  408.824222] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  408.830913] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
08:29:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, 0x0)

[  408.916299] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  408.922776] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  408.956588] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  408.963058] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  408.966644] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  408.984142] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  409.184835] net_ratelimit: 22 callbacks suppressed
[  409.184843] protocol 88fb is buggy, dev hsr_slave_0
[  409.194858] protocol 88fb is buggy, dev hsr_slave_1
08:29:50 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xe00000000000000}, 0x0)

08:29:50 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:50 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

[  409.264830] protocol 88fb is buggy, dev hsr_slave_0
[  409.269894] protocol 88fb is buggy, dev hsr_slave_1
08:29:50 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x2, 0x2)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={<r1=>0x0}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000700)={r1, 0x2}, &(0x7f0000000740)=0x8)
r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x10000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
getsockname(r3, &(0x7f0000000780)=@ax25={{0x3, @null}, [@netrom, @remote, @netrom, @rose, @remote, @null, @bcast, @default]}, &(0x7f0000000800)=0x80)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000300)={0x0, 0x0, @ioapic})
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x2000, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="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"], 0x94}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@empty, @ipv4={[], [], @rand_addr=0xcc35}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0xfd4, 0xad1, 0x100, 0x8314, 0x80, r4})

[  409.340762] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  409.353201] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
08:29:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x1000000000000000}, 0x0)

08:29:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  409.415804] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  409.422246] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  409.501162] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  409.533528] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
08:29:50 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10)
getsockname$unix(r1, 0x0, &(0x7f0000000000))
getsockname$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/stat\x00')
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'tunl0\x00', @ifru_settings={0x5423ea9b, 0x2, @fr_pvc_info=&(0x7f00000000c0)={0x5, 'bcsf0\x00'}}}})

08:29:50 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x3f00000000000000}, 0x0)

[  409.579509] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  409.607442] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  409.633513] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  409.644561] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  409.662368] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  409.672261] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  409.694688] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  409.705811] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  409.723436] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  409.741336] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  409.751466] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  409.763096] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  409.766230] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  409.773170] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  409.779356] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  409.789733] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  409.844432] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  409.854131] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  409.902170] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  409.909005] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  410.064853] protocol 88fb is buggy, dev hsr_slave_0
[  410.069926] protocol 88fb is buggy, dev hsr_slave_1
08:29:51 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:51 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4201000000000000}, 0x0)

08:29:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)

08:29:51 executing program 1:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xc730, 0x4)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  410.224818] protocol 88fb is buggy, dev hsr_slave_0
[  410.229895] protocol 88fb is buggy, dev hsr_slave_1
[  410.250521] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  410.260680] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  410.272518] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
08:29:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x6000000000000000}, 0x0)

08:29:51 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x1, 0xff})

[  410.299764] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  410.312671] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  410.330406] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
08:29:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  410.364003] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  410.370386] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  410.370413] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
08:29:51 executing program 1:
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x6558000000000000}, 0x0)

[  410.405348] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:51 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  410.464714] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  410.471273] protocol 88fb is buggy, dev hsr_slave_0
[  410.471315] protocol 88fb is buggy, dev hsr_slave_1
[  410.517082] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  410.555193] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  410.574183] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  410.588622] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  410.595134] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  410.605126] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  410.611564] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  410.621385] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  410.627838] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  410.637667] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  410.644078] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  410.654539] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  410.660972] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  410.671374] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  410.677838] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
08:29:52 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:52 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)

08:29:52 executing program 1:
r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x9, 0x40042)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x9, 0x4)
r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x400001)
r2 = fcntl$getown(r1, 0x9)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=<r3=>0x0)
kcmp(r2, r3, 0x3, r1, r1)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8100000000000000}, 0x0)

08:29:52 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  411.116740] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  411.124167] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  411.143134] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  411.147555] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:52 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:52 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x9, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10000101405, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x40, 0x4, 0x100f, 0x8, 0xb, 0x1, 0x2, 0x6}})

08:29:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)

[  411.211957] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  411.228424] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
08:29:52 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  411.282800] QAT: Invalid ioctl
[  411.286390] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  411.314370] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  411.326956] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
08:29:52 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xc72f, 0xffffffffffffffff)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

[  411.341542] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  411.360356] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
08:29:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0)

[  411.394869] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  411.450032] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  411.469718] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  411.480334] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  411.488082] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  411.498348] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  411.509140] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  411.519795] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  411.526304] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  411.536193] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  411.542647] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  411.552515] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  411.558949] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
08:29:53 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')

08:29:53 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000})
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)

08:29:53 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xb1414ac00000000)

08:29:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0)

08:29:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0xfd01, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0)

[  411.978254] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  411.987624] kobject: 'loop3' (00000000bddbfb45): kobject_uevent_env
[  411.994120] kobject: 'loop3' (00000000bddbfb45): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  412.001561] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
08:29:53 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:29:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001f, 0x0, 0x17b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}})

08:29:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xffffffff00000000}, 0x0)

08:29:53 executing program 5:
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  412.073954] kobject: 'kvm' (00000000cdab7e7e): kobject_uevent_env
[  412.074332] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  412.092860] kobject: 'kvm' (00000000cdab7e7e): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  412.160227] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
08:29:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="850000000400000012000c0000000e619a88140dd67253d06c37d507e8f4c998c960d5db31d8f07ba787de9bf85fc64f4f4e912940759951acabbc925c7344dcff5dcc781eaab8970d66ad672fc3e4bd3d528adb24179e1589efb62ba6c78263df21230c598f3b5984cf5434f86cec006440ca7c66d0ae7e1bafa534f55db3f6055e4d19482b5ab6a90000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0)

[  412.207381] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  412.247536] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  412.271462] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  412.287240] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  412.303867] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  412.310720] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  412.320818] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  412.327394] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  412.339511] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  412.346845] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  412.357540] kobject: 'loop4' (000000002d6e1c8a): kobject_uevent_env
[  412.363953] kobject: 'loop4' (000000002d6e1c8a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  412.373808] kobject: 'loop1' (000000000773c402): kobject_uevent_env
[  412.380263] kobject: 'loop1' (000000000773c402): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  412.390021] kobject: 'loop0' (000000007366e0e3): kobject_uevent_env
[  412.396490] kobject: 'loop0' (000000007366e0e3): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  412.406356] kobject: 'loop5' (000000009d963a46): kobject_uevent_env
[  412.412777] kobject: 'loop5' (000000009d963a46): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  412.422601] kobject: 'loop2' (0000000051124582): kobject_uevent_env
[  412.429044] kobject: 'loop2' (0000000051124582): fill_kobj_path: path = '/devices/virtual/block/loop2'