cec9905b3b63143ddc0ac78e120dc5de82b05ac7876aaee058fa0a2ea71c2272fa373b789c1749601a3337"}, @op={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x110, 0x20000000}, {0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000005480)="5444cad091328894095ac33a75b55d866795b49b0f25b3cb1df5bc0ade1a1231ae916c84bf913c3706aacf4ff432ef56b2c5e997d77a6d52a9d60fb6514c563508196f0bf87c7f61e23c07c7a9f358806c3eceff84803369d9a6caa22408221ecf8cfc2d00af5ccba63dfe737d7c6f57272f2e3105061b2f46dbcb6ee53f540ea10103d606c46672d2f979892884d4d2e1bfccbef10577a0e1f00491d73dab2773c65ebd9c1e7eb35a24a1624371a693fb3ef6cafc8d655eda2d5f5cc635de793bd9866c98bdd664ca4d38f2cddf1b62", 0xd0}, {&(0x7f0000005580)="94d4c83be926b80684c2982c24411a68fd1d985b2c13acbe3a5880c2ad5b5c01b45298e33574ffc10edfd69c5b04b8d6d4b4ff", 0x33}, {&(0x7f00000055c0)="94a16c4c4192d3c3941231989d5e5dde0ba2936406f92cea31c7d0e42d00785998275c58500aa289b3a0b7c2edff9fe1bda0751eb62c22787657672061398284f473254e21dae802ea12bfcf64705fac85feac8e7acf60567913de5024cf370869eebb9009de21dfe08631b13fe2a76022a33e6ee357e0d967810500e1e17fae06cd870de1b0a110f350176ce52f74626f540a7083e1fce5e2815d454be09ba289ab9333ddaa7c870fa93ca81e9cccba39c46ee872c64c26b12549bbbe4ed518f3757de4f22d9446619467d0aa91a6d18ec5fccaa6818c1815d6b9", 0xdb}, {&(0x7f00000056c0)="ad2586b787c61485179cee2369e66ba2f0d09ef26cac8896449cd6e61189958dc02ae86e722b90793cb08cab3fa37d8f618f3fa9df48560821e5d15af0b449f725e549b983eb5e1127d307543aca1c69781470e187778b875de5c7c38c04a528e36ce7f6a171462819dcf134d4b0", 0x6e}, {&(0x7f0000005740)="5058b9a7f1eef12f2cccbaa4f257f979ba70c07362eb0036f50a14230404efed2cc473cdd6a23b8db24b6445c3ee76e952307198715e3a0aa6c3fe58806d338b56bdbd1fd36416b8bb7fff4894eb4612b06936fefdc8044d3bb4e106de79b4b9416d2bd09c55fb7a08843caaeb05ea430ab8ad42ea57caed7c54e32a50d6ee94b0e3615abd3800ce", 0x88}], 0x5, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000005880)="4a18ed809e79624be4d4c8be8b184f9e2a178fc5723bf8defbabc087651ffd14720036dd521b928393a0e29eeff468ee8a4434a80a0ab51636f843fc79e25aaec83176be63b85e8418662fb9ef321eddebce7b1c188352413c0471d226487c25d3ab39073939e3bae67c1524e7db9de22df5d5770da12cd1b2c5e8d3b695ee1cf2c405e883c2b5c33ffe534150b5d7845c03247a5b17ea68bddaf950047c49855420cc1de044c44053032733c28d57a6f3a5904e9d80b380fd2a1fb9b9f0b87fcae30c40ae4c19a2ce3fcead044bf398af15c578cc285ac74e92322aaeb0bc232f29bcd97a77da5a8fb5eee9cead4a66aef61c264138a454fd5ae30c32569c9b7e6b6f3c6dda10c2e760a3805bab7fd3f3548871629a5e45cd4219139f27bbd949be4b6c6feec307883754df2332d936d9e0e8a8a39f4244a8dc5ba0ecc50c5b64082927d59f5016aa9dc9ee8d20b3e874c4fb1c3fefd1735ad27aa7289d58a49573948fa130204065a5ebdd7416191a173f57c29e7dd6b9a0f806abb1a8058551a02166f14a52b87df168666317252dc5d10c5cf0a4a8871e2fb29c39759a203ee0ef838b82ebf2bcf7a515b97d91ba66db9858a53e2a8c03df07cc5ca5f93f9c9416d676b65da4b4d1db60cc4141103971d4fa32dd79e65d723125a77e0563582277b178031e64db7197361a9bdd8097fdff5e14082926bfd578dc60b7ff7bd846677a614bde675355da5140bdac5a599d3ed452269590c12ff58fc76d5ce80af2525075afd51227d32193c758682905195aa168eaf74744332359c9673c91e41cca4073911b9727d22c318f8175f0bdbfc56228a3359a4e45c9000bf2bffe0062459995a23bb648239006c0773b82bc253806cb990f1bec252c51fc712b8c1b4d1da9de310069598296f69f199790ca85482b70a66088b1c1ede249bdc6ed5f3b8f70154f28c1ee4de9a1cf585385eeb9fc0706ddc428f72ecacb5e36a26465a0e3d19188f811081904efa7f9882734720c2478a38810699da591f6bb5d34d53f5a57bde8a1b9e4b0b481da7e0362667d9cd2c9636bdc3fd5c19bb2632131a1631ae0a3d8487d2ae6093b6ab85ef320689505fa14ccdb92720f9342f83d763d65dded206cc863cf8fddf9daba050bfed06a1f79cf7724a559fecf43837c9852c1f2d518424586fd331df10614cdeb8800420c7817e518f10bde5e882b1df35b2dfb323c38651dfaf2c625ac8bc6b35289d3a734f4e708f862362f2d7c5185400891a8f58fa1975240055083d5a8046c03f6c1492075a846b42383bbac75fb98f4ad1ecac1bd0b267ab07b02fda63ab25a58cf5fe6c3839369f4113f27fce9f883499d37261e2acde30b3ee27750b9a4bc62824e684198090fc4b597ad7fd9c755d8fe6fca5c0501d20409a91be82205e19b4afc6570bfe9964dedf6749f414256002855b55527d4e5ea7b18431d870d39bbbf1ecd644c5c32b365e163f7fa87373e0cbb58b881ad6dd3dbd5840876e812600fca9a5226d501b48477e01d5e2e7681e322983452953c8f186b21041395522007dd4269045b760f7ea9068fa631f07aa358577f396ecb5d1e1c348676919a014e58d2c9264def818d920973d0a5a5d948570a070fdc1af5fe8896a5579e9ba9f992ecd7e6cb769aceb8bf678c203744695264b79d7b73e6b305309d32ba5d56d5c1005b0b51f07bbb6ec1fba79cf7f4ed729a9c0ba62470b5897aa9b90e308a153646420b4ffa3407b00d036b07c16640b34fd19a1ba00564cf2e3e4a5f108048a5cf530dc7efb54dc66f09475e9552b09a24275e0cd2381c454afa8dfb3e5d07051add4d559eb148b1bba88228f10a4d4717de6d6560215a5f698a2c6d945cb7af4368211e53ffca9632b8ddb5426a1df76c5336d689828f037a4284dbcb484a478e74742857d8427c8c53a577b033c3df26bf93ea64b1793607f9b00ec7f575b7253312ac7d5fa01659abc4db6e8722ba213599b52ae95c47981571a010c45318ce2ead68daea3881042ff8189170c23cd772d419e868a0e386aaf08c6344bd80387da9a95ad26ede2224f85fb690930e271d55fd1715274734754e30709e28e25aa3956ddc539e31dbffeac1a0d87fa4d8de954b554ab7dd5812706ffe83af6129f8184f3f24c011442ad63e0c2f4b0962db7988776bb74a6daabba2b665b2965da8bac801e477444233f31144dc952e2444aa3060dc93c002744c3f8a7359b689b0e87c2a16b908de4352814593cb810b496af4225ca8e57f55bebf508c6683672b3ccd24777904a2bb85dadcf39e009cb5485a12d3f085991461df3370529144721cc69eca92dd2e0281e84dd3b1cd70a6e0807f5934251fcf93d63b7e52bc0d470b9a6aaf603c65f643e722f3e6eb4d21c3eaf8f2565a8618c54b39984e05a6dbce4a286611a7732cdce107069c140071ec740778eea36599b5936004e965d74e6a457fa4a831ba051af30ab9f632ea697faf62dadc35d6329e856a9a6b6c7cbeaa0be523027644e533a8b368d51418c6738b36f229f1ae77e53495e2f14b656e2d6a0333da79451447b396a4d74d33684ede39b66ef2edfb42249c5a13dc702f94a464688ca1c36e7c0ea5cb27a98824cc88828fe6e84629a363028e389bd419105aa9702318efc7b3531101278baac6380f0540bdc3fe30b6c438e4f9b8dde90be60b5b85ac2d1c3c52ea81b86970b2d77de7f929fc685a6f16440482f53691c5347f49ef67ddfd85d5405975be10431e951dfab2db7fead10f306d3a745fc1491bc23b6fe2ad2c8f757efc7874c53ac633fca29d19a1233aa4d77cbec247121d69d4a78f474e2975241a82be0b9a7104952fdcec40462ca52ab75dd1c46097d259999b5ce164cf4b30f62dd642df50d7937386078821347196ec70e90e92c170cd5ea5d14c16a7d69bc528f01868bb6c45802b7a0eee9344b752be8631f0c8d62b32d7e749f2d8bde2fc1cffebbb057be9ef1b45e5b334de7b91542c50a1a0740bac43a02b121d68b0924d989b764ea187c661ba90c3aa6969b8c4988433648e3af37c85fff7f241fba1ce121dfd88196cc39f1b87207a5cc7c64337411a582f0194a0010840bbdcb4a90f868e3ea086e790282f6fbd9cbcd562a6dcddea4c10420c96fe549605c4ae03cf6dd72aa81b5ceeb3c008f70e0bc3e6d18ebde6e10064fd8e7fcc1b220c8877884a2e6827929dc209cdaf17e1ffb1a26d3fcc52a60b6e448f1851368a14c81e9e481ee62482cb4ceff5e2f92a1a84c844327d1eae9bfffa852e7ab5fe15799d8985e9807e3677464c4836e6cb3a379fae8dc767d300ecea285c351309874e7048f1719b707839060e0cbe7c905e287c68887ba96511610df29289cae7dc92e366694416152caafed6344fa2f851fd928399fd0aa4b9a5bba0da00a50a5d000d9011cbed8143c7f0616f72fb3916dd55b4aa834d912c7ed45041dff69d880192ededbf66e6e0b1907a894831e31edf43e2aa5aa74ffa2f58b4401e3770efced7893186a4235c1683ca5afd844dcafd92fc884ac1368f27b7735fee253461f5449e3bfe6fbd5fe75d278be7268b39508cfa7d80c02d5b12e7b270abac9cb73f0a182c4f0f713b2968f66a983b079945355813a8e02f3f4406bbd2a30e899f998141b8f7b7e5e197a2979ecf9eefa2ecf65c4bccfb9ee80b1fd69497605bf055ba5eb928386b682fc8d668a261b9343eab420d52086ec912d462f0718ec7c0545553aa68cb80f885e8147bb4be3c7dc803cc75fb0687e38a50cf234af679931625829c02b876e939d035aec994e9c2afbf94c10294c3ac759fd8ab614bb81c13f9549f6589c87a1c991935f413d4191956be3d8e5fdaf28df431a69c659994b12ddb7e21a949d6c090134403c9a1daa8936f0e65eb325d4f9208c952efc6496bcba41a85d2dba252c6d3fb806881fb27397be055569ebff3885f2fcba20340e35f1288bc204615ec3a16222d47697219e6e7f6169c20b448c0674b019e00b59c15a3303d50fc8c2df8c7c4cab11a4c866b10fe9ed9b749df262164baf2aa771a75408ab3f48e3bab14ec85ac795f0d93c2f92a0cce44d9acbfe1289e2c768152dcf461f3768b391602ca45e99ba94c899888d0c9166680f20a168e30b2d4b51b5288b5f5793dfe29d79906091631b133c5b34a03d5b962d3612d6ac2d21b3832f8b1055d720cfdb284ac9727f2a9e0987b82d048cb9a2a870e2ba300dcf067fc80bf0354a38c85f06329814894b7972634c6d888c562ee91606b14e90e26a1e838a43bfbe72efa4db1027bc48c05a49e1f75286817ff5976a308b2f21ef0838e15263a463c374f506d11a761afc1e383c50a6d300b1b766da07b34599e36374aa3186d9a3af83638121b64d04f68fe48999deef173df2343a158b5eaff130f9024a60e6d5c389fa706b1098b452bfb0414f3c14be150a0225d84973249309f17abee493a7d0a6e42a32a7964a6c6bcb7aaef9c4123b6d040d1d46d54733b42ceca517f88aef7fe228aa8e62d2055c1ab779d54b19362481e006b30666406866c917fdb826e3de92baacad0cc7b075ae47505030ecb3c1ed115741d25eeb3fe36ec26ea9bc9c31f129c8adf623c59b96ac9f5bb09db8616d5bf867378c227cebca8d1c890feaf9cbfc70f34a8d3d0d6607dfaa6cfbf94a399265c63c77da8189ef3bedbb131911cf290d9fdc6c63709da4c52b59a202ec4448213ae0dfa4372105e432b1779e2dc0680e57efefa78dfcbb9b17d58cd9748c940dc6d549798d3c9edb423c0cc1532ea169cd81e6bfb3b490c04fb640b1b2b2806357dac8e850e5a179cafe292f63cda397fb2df9bbc4986fea205e55b32532eaaef2c18655c63d15ada2dec3dafe3c807969f1f6ec0c1addec8f05940f8d72444ee62d8d8986f37ec02514840ce0d5c0b8517a9c672994865bc8baac748eaa80cd269fc42fd5936d8d6f8799a0552219c5b5eb9ce3b3c97bebdef01024ab629292bbb9236f1750bf27fea3547dab0ed6fc69089a9745b946ff2d49d496183fdec31d107c40c03ce11825719dcbc472846bd8355715e419421c407a64b5b192b1d33d9d9b62d348a9950a75926a61e286d035c42c4926aa7d637cbf17968743d7294ce8d249b61176ff5ac6586c7e5f9cbbca1fa5a3b37f33f151d3ac0258cd6f2c98ef70fef895070464a389c5b6c993aae962c6d7109d46484ccbafd0864dd556ed95016d306ed9f6c3c3fde926a66490ebf7c8063a4fc6f48cca0cc61f38420bd809e327e51e654ec364c91df9fddd54e79a804d39d842aad4d3298e0f16ae1a3b761da66894537aff709b4368b8ed3863610c3ffb4042575171c306a4624f509b0d1f4100907e83e459ef9006c41d21058dbe8f89deca946307e978ff8b159a02df59030e0ed134b7543db328c2dc8bcfd4c0e1ff079d315912355fb8e5c9c63e272086f942eba0b60d06a6b6eb5b5fd9515337098fd7f555a82df3d7cdeafe07b1f6a934e12789fc7caa116283b4ca73da25efbfcde1116c56cf92a610b562f831ea273da2bb11bc64eccdc171cafef8f552f19c9d6a325e06b66609feeace8bb9170e0816717909b469cd90fe5c2d46cd3c9f59ec09e1dc509d6265baa42b7635715542d91b1920998b6ff4b0a21f9dbec996dc85dea50514168bd08a61352fb082e122eb420d98fdf29d5bb2aea9382531d24ec88e73c95523b0864357d009e9b6c26d00fdf526255cb13324dba95291e91b6bee8d0d9978696d025b12f35e83074582f", 0x1000}, {&(0x7f0000006880)="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", 0xfa}, {&(0x7f0000006980)="12d40625286536adfa00a9deec0411dc59373c2d28513e0fcda6eed22359f170b0f5a0a8aa731754ae1e36417d3ffe6c7b3f67e8bf956fcc123468cc11c1b74cef9031480664876267a8394c78c4a59525d1ade921305541848bd134fb5473b23a0a7b901843b852dcd26a6abd219fdb9d23f28c859db79def0bab4c8d641112c107508a2c7d189bbd33e69ffbb71b6023b880cc5e448d6238ed6d28", 0x9c}, {&(0x7f0000006a40)="ed01f866ae232bd74c6328b734c08c6b091d247ab77b7633c77657eb0354306c79f9876d1d99a7d55f852d64052004a5f9615d84a0ee4e3cc3032a103bef49fb9ffe23d4343067f87375e50597ae8dc4e3afa8ba2e52994050b165a79491732ba3d5d36243aa2e01c9ba4de726cdca664087", 0x72}, {&(0x7f0000006ac0)="8ee56ddcc14dfbb10cff32c5fd33c71c57fd0d69fa612942ef47467958ec8af3e3b3d84cd1afbdd1aea4100e4bcea1bcb4d2c8bc86a75d875ec8809f1cc827b7ded68939929d906a", 0x48}], 0x5, &(0x7f00000094c0)=ANY=[@ANYBLOB="3800000000000000170100000200000020000000601e36c61c5978f5d5c59b25cdb95cd900b91cde1f51520d8caab42577682b6a0000000018100000000000001701000002000000001000002dbae255ea285cfad26b63fe6b14b3a54e12b07b2ec4b2a7a433a5dd8d422129ef6e7907785791bc5a3b31f24e3578da483fecb881d7bae223567a6a86541ce0bbc9db9050dce08038376769b24980c77faf0bb00ef5aa8983a7081fabdc8bb172d848b50c55915fc9d1543ee1a6eae4417e79ed07489607d89ad299fa2b06000eb968b796166427dfba984ba3a02c01ed043f9d6a3ed202f1889ee4bceb14e5633cb0326bcc642b43e5c5feebc75505e5b01e02be45c1681359d26f7c68fdd8882186900f2bdcd0c0c75066f6c2d073746b1cc7c1dcba254164937423ee501d1484833a3b7b7d6ed2ad4d67c14e887075d5eaff67c7f91f8c957eaffd81aa2d3332ce6f884f09e9b391f2a7925272b424f9cc16bdb7391db21f5bf430b31a172db07959b57b3c774c3958778b7664527f30f204d8ad52e62f0c753c6edf4ebc929a1bbf23ec95dc81fef39e5d12dab99858b9e73c9c6945914bf96eb93c76fde01a6d3f96adf162a5e4cac0a0783ad03fd511352235eaa5d2b6d24ca590c915bb8de2a2a53b082272e2b7f713b2a67c34d530bfa3996b959358b420b8c03ad4d74d896d01705ed6a7eae9fc685cd96321263fdb43a7bcad27e2e4e8d31ff8bdfd5826030756f34f2df7087b29abba9719d9d3eb38a3bd4ffc649d23c93a6dff753e256aafe7a9848b82ebf69b6b7c368bf145d135ed877ca097ab802fdea5867ddecf4b28a9b7416506ed6a39f0645d057f047d2d5afeadf9c2dcc1494f07447ce18074744415019e513c231ce892f1a0674317e91f3c0e6b7cbd79d7aaad2b6ed8a9e8da9e4878b4e9684e3c27fb2cdbe3ec294bcda1ba53ea295d507bc807737bada30f98963cb0f54a64836ce2c41090969b03495495954bc15803c1a2293fb8dc898db4f244e004a921811d6a1255a846637a5f1d2c79ed4c3e4b2f9361461066809b8319a4ccfbc1666a3988ba83e3fe9863acf9e27daf0a95d8f40e4c3c6adc4c30d406867f7c20c68fbd043a3b77462d4c9d5dcce9ff9003a630acc851819169029dca9c0a95af41c3f63c5b03b5db90a981ea9b0c2a66a7e1af50df723c23b09e9919ca626596964885e38a379be18e90ea12cb9a37766ad337c9ed7f8b1013a9092bbf754a29d3831ac27bb099a841502f69576631c65f116c06a67524a17f92678d0ebbb8e37ec7601a220058d811b0d3bdd50e329865cfe6542e5fa953757954b7544c4692bcb0c22fec0140916b5b49b6485b0be97a189d830f758aea4c1740c0a1ceeec24dcf6813215a32bdb536e09b225156401800cfd9fcac7167694f0f3b9f2a6d8ba95125e92cbafff7a21c05c8abefc66a7aa3e03768d5f0239546540e9ec64770aa0d13c44d214da0fe821b79d93d52c8c55659d3c0c71d1aeb6954c0d0aea1f7a4b64cace09e824134036e325ef5beb56801feca14a98d22dd0007579285f627cf04bb137106b11766585a4740ac464e69b64042e1e25d9fe8e484393fc2a3b3a0158dcfe2c6537749b667592823126df20df01938b9d6035829fab3f5d9522861ca8ea29298bbf5d66c19e42ea66639135c6ce69701d0a300bb681522dcfb9dd25634445aae632780cf7702b1162907db0bb807accd81b506b0704b549a982f0663aa8e2476b9a1d46b534e2c1d8c6799f77c9382f9031a97537f584f0bbaa47c3ffbfcb5e0999bb237f0c98f8954cbdc25192d5da768a3063ab34279a03a2aede785a547f96b8c26de9beaa4ea889f746caf3c0306fdd72db3745f5adde7734ae2c06b28690e81944b868139bdfbe042d349aef3f00502ddb81d12ff59b6251fa18ab84df8a726858afaead441908bffc412074fdce2fd473b5ee1c7bccc0ddd27ba7a7d58288beb864150233f53a659d0c256216458bc7ae6810463bdd35331e84a4b1ded9566add91395c01f40fa0a111a6d14cebc6c937086e447943dfd819840f61d33e25e34ebcd33af5a5266700a1f21c3e5bf76d08afa3777fb40fc8af5ce34b84676c3053519c8b28661f74172695104481738333bf9620ae5010b2ef9119f94dbd115ca6b10556682a41f7462942a5b5e340e1407ef4516d51b107b9f55052e9d39d3fe50f0fc9e848ab4438b6b951bd1e3b8a4669f3cb992acd56fdd7fd09635c3b30e0d4e96b1b01dff731abcbd189ad078d1a38626aba648a43168bd7569f2e8a81ee281c802c5c430c800d8f28d3e1b3c6cda9999b01cb23a98128960299d7ce07f62b5381e1985926336fa7a429b7314f4404711ffc436f75da67da2f5a3a58dc0e819dff922733b552fb25ef4ab0f7367b530a51bb6460ffec5258c74c6e522c4eeb8c6908ee2a6b3c1db21d97bd2cb42b8240df6520ef27cfeda01e8165d092d37e3225a8a69320a7b0f06ed8e4aceec00e90fa204aec3c1cf15fbe9c03eeea54d202709701e15689ae0a9a0647fd2d03280333262207776a8a7eed9bf85b5de8c09a05c3fdcf71c34a701d2b0523f836e9b459736b39017ed1a8f0cd473b723f7b5cb5a45f945cceb7102ca9a505b068d669ea26b55993e6f17719eb23583afc26d16af007125ca4a951a1cd195eee2d225fa693cf0b1174ea620ebf9cb411a08c43e8339bc27a6484f8d662774a994f4c20f15058cd07523a223e3501d075f7bc181cefaa479cba6547093faa58246ddfb1839af4792dddfe700579cd195fe629f04e7ac4246d411cd756856c42d5e23cf7f835d9bc0cd6e3c597a0207be528309484d49f967c33e55fb6641d3d7efaf3b47e02dde9a1a54c62cf483f5f7a70096a92ee3feb8d4db3d29c9a52cd25f2b3167bb466e9faea891fedd83c2b4bd9e66308e85c9908195ca6bd49836563fd9c3819c9c3b67eceb685f48497358759d374ecbf82df403813f1ed8240ca6f21d5abfb05c51283fde8a05dd9baf1bc716e3cd20478bc9fcd39973d0d2c04a8b9f0883ebcb11edc41f50c4b856a5933fd3cec37ff3f1333d82e4c1f1ceb170a8ba457dd02f0f2b042619e5c32ada82b7e28a73bf320400ea31e1babdb4c9eeabe6a16d28179fd6e2881cbe627ba2c465c7a5fddefee01093b6d2753f72d83e6f97fb50219ae6db595d71f612e4374490135bee9809f0fef7c8e97ef4ee16fcfe9a94080d8441560d40e14a9f0bce93c0088e346a536933cacdb3bbd703f65dacd7a6b26075f3fd7dfa68b1f0afc8f1c117f2c2f69eec226189ca6b7aaf4e056ce2ab5d839c78458f5b97b38231a1638d23fc1e0b06cf46e2fbf156ee921760585eacda5279bbeec4187c28df1613b2f413446330ce71b9c31f882a695d6e804e474a153041be0172a3c2733256889fd7944064c3c7c22d216b2123740a952902db1966f9338409215712f0956485d5675d859fc3ca75db167529e3801386e0101d802ddf14cc436f02a27f6cf33879b119fc516d9a3c692078a3398ff86a85978ac20e39ceb0f85f39d6bd6e0bb4f34633d57f89ddc18d23a8ead81d868ecb38522271f324d9652299ebcdcf12f67677c01b6302b2fe0cfd62b07445458e1470bb21c8e4b2e64613b1ce0a57a999f5bf4bdc8e5ea2bbc70e4b6fd107b4dc261490967620915fba919de2456d816ea188752bf9a67c043b84e457fdf556099112c96bdc4ce9a0ea9ba927e6d9e489bf60ef08dbbd513290ca014246ce0be972de267b00a99e6e1f62551e65ae2c112c1eb478d89bf9d140973d0f960b68acc8789b15dc01fe2eae198aca696ce8620bc73a29e45e2628878a6076ea15a20b78f2c21c36fc14f3b5baa17b077f302e4df7f3eba1746adec917097573522d3ec318b99de71c7f880088713c5b8f358ba959664d42022b02ed7b44fac88b1f7b5cad8bb1a6af9808c6b43c8ead02f80845adc3c6e1a4f825c4960454a9829801a15c192d437aa188e0951a2013efe80af4dc16b900c6c4c279fde5260d7d2fe7088dbb9bfe28457d14247f4181b53ff86c39707f2e7f109056827a1cd733847d6d3b1d7d387de8d3127b652ff609c3e9ca9aa1fed62fb51d6ab74f64ffe9d041369706a16850b04eb08a32b232f596fdaa89d0e8719f96c0d0a92dc09815fd317e0fca11fb75133e619c2ef191c8adcc3aec74b921e2d04411aa0be0b9fb8448bb6a73147b5e1a15ec9f068955012854008b37254c056dceb6d542cce464edb07c9541091be2326b506cd97ca7c9dacc1558581d60afdfadaa6ca994b165255e8e8472cc4775863424448d34902d11f5e3ba332b747124741f3cdd1f0fc189d818632ef0a5f6703b94c63983c19cba12b2bb596a9bdeb70aa9583853b00b596da17f9f24f3ce77bd22b2d3a2951931232d3b633a25dbead2a1bd0f575f07440a30e45be172535875b3f06e47ebe92afaf52d57807fea7bf4d0742cd9743c98d85a86bc6ae28815fc301c855abba882c501817395ff0a0c785dfbf903bae6d1bd123b20470803fe50526e8b722e19839ebaf43ac3b877794fc245f32ce6e7d23fdf035750060a83bae0bad2f1b99d8543a9aa734fd2cd90aadfeee24c5761ea9a33260638cfeb748d300bf3a77a11761ace310d1aa414b473028e7c6f88107506000000000000008ec63437130199c83125c8ae572a6d9e0dbe85ba784a323889e7a5d669278964d92fc0b7e49f3ff0d6cf0c4fd0640fd439529e3cacd6efda7e2a6b5840871a66b7931a9593e3e59703c707cde1261ed1643866ad9c2eb5948dd0b9ed09e9bee4b187dd4cbd5a57108ab8f3853d866b781d0bb74517ca84eacb570e5b9bfb21725b89ea9540c95d468db4703fbc31a74b8ff9164393d7eb8f8b52bc1d72bd4488219cdc3d7bb9f9df3df682ba4ec6189455d3cc8a63a6b397f0dad8717240a04b8bcb2875ea36aad19cd981022d80bb27ee722f1ed1db8adfbbdaaf4cdb9f821b403512a11442ee5e9524030e78d765ac44375dcc8bbc7743f42998430890b853150f317f0d3836ddaf8fb96a8f18f0a3ef38d114f00e85e2849c99dc29b545828aadc50e0f7a728738151fcb236f95571baf718d9c488cef6d6c11166ab3977b25a62c1ae475b1bcf0d78389b8f066c710243caf46f9084325883ad41457ad52f6a9c69b3dc940aa774704e4617a0e3304ed64fd5b7fe43029ede7e42b34f6a60de4453b07b484969d86b078f679b22b1cb4c23e454b22cbe70c5395338ba8656d42cdb9d8ac080fbdc6b5f6434da81729deac349c82fd0410fd52642da21f8d47454114754cd0ae8c1d3158f15dbc951c00f701e926cf832c2396ece5b696b8580af789da7a5e4fe03d4e444be6abfa783b2f155bfb13ab70d0444a177bd5b6feb2c2d0faa54016fee8635cfc800a07165b035e66f40a75bdb3e60a709a9caa84a90ac2ce8e94c88b2f0fe8aff646ef62788f126671640cba5f1c579b0fe3228726a21907aebfa7be9e7a2cbb7f670a7eb3229ca2f4ea5401a145b8a817cef48e445b4fb0e0c23a69ed3691ff82f5bb117b633ee57002ca921d1e6e0beadfe862c4a5489c9a6fba00353cb7483b0830f9ab20f111f68f03c008def10011df6abe364955212ae32692efd935bc515d0d9dd4f06ae88e4096e076b3bfdf0132599e072a698ff49387bc048290ea981b3c99ff8b59defa379c059b79cc5412cf171f079537ca476d5c379d63521d8d0125b26f4d8a60c60ae9a29c5bc002906fcc975579aacf55da51a2f38b9211300f2a8aca3c2577ae3d30f0d65ad69c9dcc96d23ed0ee9510c6a74f3eb5148b2cc18a1db3c8dc9d586d50a23b7bea88311286257419a45455cffa30be6d942e01bb275ae5f32ed67ff100000000180000000000000017010000030000000100000000000000180000000000000017010000040000000800000000000000480000000000000017010000020000003200000030d4d8d29ae3bb0cd5d198bbbe2c5f594b5e35c246d602ca604744058069d78a73b857f83bdfb1e942dda042fa97d452419100001855e86fb18debb2f91f26e0d8a227c6ece54cf5245a5e47dddc2b7f05bbaca8e54b0a0f5086a29b5093b27b93cbcb341b669345263cddc6157d6e7e33aa72cb81d31fcfc5992b5cb6bc87953fbf"], 0x10c8, 0x20000000}, {0x0, 0x0, &(0x7f0000008100)=[{&(0x7f0000007cc0)="dfb62dd726c60466c3b27fda449197e166d9f08efbe68f4f2a6e08aeccc3ee8c69a453b663702e332838b8dee45a153aee353647030585e87325bc75a3e8aec4e13f2920de3a920d6390d423b6146f46073eebcce145db83ed1254688b3296dec6f26f688028263669d5", 0x6a}, {&(0x7f0000007d40)="939e0daba799ab448a162dcd59eb4ef558b93530bd5770ccdfb272485cca4e222f4c335832e896ca40ba156493f2cae52a9acb21e51a94143ca257fba74e8df180c7d1342c8bc2548a75a0680140cb7409841004b7b9da", 0x57}, {&(0x7f0000007dc0)="d31695f09c34b3de04c77be9d91e0f9825de4e8f4dcac67d6f6d433f67372227d9f3fe4e76e5eb79578d3467f9f9eaf0e41d64b39afc088451c0c3c92139ee59f051d0487ba13e0726d2ea35e1fac268f95117b42120fd3aaeb05a6734e94b96701164d8f6e55ec2708225b5ce1aa2559e35f2cbd5fc52660019d697fbed4ca220582e25f1b25b30e9cd1239d440d04c889c6651dd02a714812571fd22153767056614a44442c1efe83bd38f4458ea10b477ffb53d641773a0400546a0d6ae190ac05516efd1854251506d5756fc25bdacaae46265c7ee835e037051ef2c020a0182c0cb8f2e384827cd479789e2", 0xee}, {&(0x7f0000007ec0)="61e549eae8b182574001c4e03cff59cb7bb9a43356071ab51f2e428417422c9c114785c7f60a4f7bd05d4e28aa0da4a9eb869dce03df51a931f760f22f14c07f4743a189f1d074ab6a1459dc139d3e46b4189572079037850ce81dae1467c4d8e204a19f5d25fb7bf9", 0x69}, {&(0x7f0000007f40)="142a9641cbecfb6f2df5ced3696f87c68e35a9cc32583adbc145a50776028e8d598d5bad9771d27cbf3f300642136d6c4d2fddcbaa3456373d5ac510a0fbe95f9b45360f3b1c41956f99897a5a1600f808a58692746fc27108304d588c8e8af3b4861d39ed2fdd9a98795161d5764c49a65c978d307ccbbad77f4a23917a8e36908e32213d7f08187937348b9def3c32350786f813d72957c1c5160f193cb017b209d6063e2995a17d86bf2effd9ad086b522c27256608998b103d4b72769f0e64cab575f8db95a7f6433ea8aeb9f418686522093cdd5182f99daa738e4c8c752fd26cbb27", 0xe5}, {&(0x7f0000008040)="09b9a1a8d8f5d7ae66883da747f5e3097b8ca03b3dc6c23a64023bdb6ed2a1d5523c29c3f6e32923f4ad4f758f5a3ac535aa653c16a9d7bee8b50f9dca80ce20c63b9d323bddfb8777497279124a0bce854390f0ca0c34a65aa61f2e9cf2b0f776458098fbd6dce321033e8827ef3d6292a9483ad4c14aea449f1598f64c66a8cfcba1d07e425da4950a25532bb805daedfe", 0x92}], 0x6, &(0x7f000000a600)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000018000000000000001701000003000000010000000000000018000000000000001701000003000000010000000000000018000000000000001701000003000000010000000000000018000000000000001701000004000000090000000000000018100000000000001701000002000000001000008eb85afc9a11526a9d0dec0cb81b6b18b1ad51e3a9810801c2be4d05f467f9b8f026ff33457a83b6855ded7c3b55d91fce618eb9cacd9b3321765f595b415d967aa24119ffa9211b7367a5ca086c7fbb41c577bb26d56f14cc3bcda1717fb9438c10e2aa9cd613adc053b960eb283a119641c0697f4bda7d919f4c22f39998e0a2b7f920440bd43099563bfb2c283da487549634779b06d3a83556e06c0ac0f03be6074794ba0e24b6902791a7bc135ebcc89dd9e7bb490e1f7f01333d910d1c71c07ae800bbf00eb7450974225e6a57617cb2a95b88d91fee6b48f0312727ee74d217d20ccfb632f1b8bcc4fe35c41a1d05bd7da4d9bf6973132624128cacd7da180a131f29e9143ded52ebc923cba449081370fd931af8f02f825ccf29249c660939e06d9c368e1ffbab7de38fff730952fc75808f20df4d128d25eb9b6924bdd00c6a3944ca4f7ae36947f52c5969f2f20848005e2a6643b4df6173ba94cb053f305632de28a16b7b7cf35f2e44d151dfb46b3d8778ebd27af63613fd4002ba0fbc57a54165d9e7791f6985b44a4ee2b437098dafa432069828b89b90db1e4b66b2155d733953a293184caf22db4ffae2e2c0eccad93f645debb1fe137992e4bffc1e422097625dd81c75b1389ffff705649c22204c4afaedd3d513e44a4634b65d1224b09d5e2dd464aee89414bd9d925b801a718f2e8b36c9bf51ee628ba70df5cd934700a56aca07d0ccba07aa0ecfc9b24b336688a2b018d40a02f1587314e0f0034bed52c51441292bb674ec84ddd4bbe7d7b90d8826cec277f9ef3d36877c3d123240b473276483be7cfeed748969e7ba24685b3dcee2d8c50a35c28128bd5617073b4135ca423b6c33484d2502da42a99c7c368e7733985f78dff223348836733f4a3638d86e5e30ccee6702ed5537da5cc7c2c663b47442a483acdc9b7f04a4c1d11b9260f36915320a7d6064655c3678e7a1f86c9b85cc6a63a0c7b509b8300197140c06cf6b6b429f8a758e5bd331efe0eb1bbec345afc2cfe1bf6084b0769fb1eb971de16d6df386013f55fb68e6554af49928018dec8d1c6853d109f787ed1ac4846ba2d38042294992efa2afdcb8fd90cdfc71c4e32b76d048e7b785fb5a52e589d6eeaae12674b1d25b159be01103335c3a37a0938317f19e2d395d9406c524567957f6ea656ec15509944cf44423f97038269947d89903aaf12e42a623987c8261e06f849ce54ecc9447e7402c44289321946606107d516096ff6e5ca18dabb8ea465dbcfcdfe92b03a2256c025e46e2b6bbfe5da3d54063786ee457baaad95030abaaa19c0e759fe4e38062cf2714cf71c26724aafd10bd90bb983b5f1a521c7560fbb4113cb5807c214640a8ec698f033ce269ab455a9a31e6011597c9c8643b2748fafa11b196f76a12601bd1b784bfd67dfd4912d168f26b59dc20a9ec87b275b1afc7dc174b3692f6c1612d7f22701da0e7fad50d088f0de4d0731b5a68e97122fd832b6dd5ad83d9a547a44dd35dab018e2b6da9682f6e394c7e6f3008c0e91f35a840b584faae53ce2335515a2038a9e54cf016cf4ad72793f4ea8ec37808f2534f83a8d374a479750dac3a2d9b35ea7275f55962ad844b322e7f0a3dd54abf1d7bfc012e3552e64515af15d187adbe57ab3a1671a841b457adb6d26e4739797a5c9149cacc602808c016e7a8320870b5d65f8f9e5c3bfb879e105ddf12ac2e9a6df8231297d36435b796a8ca500dc07494035fe908b294868adf2541fe616cae57134748ef68c15ddc59902c18af6aed7da6ee4d15fb0fd3323664177728ebaf08c77236cd4ea2d2c3c1a1592338421c1368a4cd55efc2f758753a85f1db88e287844a9c63623fd4b15e37192c2f21e5cc64eace5a5dfa7956333b6bb5ca19f4152dacff6398548f967308590a4ed6ac511194868df13641e8e8babcfcf3b8ec0e95830571fab3e09185b78a353deb1eca1fcc8f8bfa9fd4c8f235111b451711e627c7b47749655c3662dc447476de43346c9b2f6792e6ed0b39058f297d9723c56d8f1f06f435f97ba6270a94e1815214603c3bf80e064ca13d984989a28d0c9b242c24e5447c28cbc6a47f7479b33e17be58ba12062f05c2624e9211aecabc537e2f638c2d1e97e5d1c2dbfdfcbf10849876bfb6d3c07b08b5a9c0d7c35106fbf346d331965edefb4706d5d9df4d96ad188403f2668901ec16de16b91fec5458c8e820ee9b2f6be3c2053ec1d4443428e11e7c826577d69e79c2724075291bf77dfbe1386cbe154a0eb7fa4132c76307e7959f6abd74753883fabacfbbfd9d89695dcb1984b3976e680b2ada9ddbb2c11c9d131256ca27fbebeea1fb583a6e4937f57913659fe77816c693bc1cd4437e908ff722b195e4cc666a9c2e94ac8684eaf095debb610a235c9425c7d362e314db3cdaf62d882ae3096aa0128734d1d5bc34b0df728414f8db6a347e74140302f487d9a93177aba8d5047ac934962f3b19ed8e0cf94c44b5d834d640cf0575f66af0d7a54085cc4eb73f091477761ca1ce63431fdedc8192ef5edcc9477828658a91a20f2c1dfcee592618820879ba8ed12b1cd6569b419794e02f247a938157b8b1f1d28322ba4b080403a02e839c476f2a0de543c354302ea5db22aa62a7c2e5ca11dd4840f04baf262f232de2d02a791d63ee0c8f3836dadc1ef211d810062d36b2badb7b0c0da9edfc06638062370bb90175512a7b8532051ad01c3e06d334054fd70ddef61ab4817b5dd611e9712b8ff38f77412c57d4c074ea0440fe9819707e8614fd4af2dd19911980bf717998e0aed4aa0e19af9b94a0ddfea5fef0a14bbfab7f464d062eec857a9686fa2ac9a8ff220f8dad0d841a79f1a877cb9cd6485520f2e7577eba675e54d7f3cbe38689f6ccdb3a007276c1d3ea96c98a7cdd0a5c52262b7dbf2a39e77e5654134d91af77e78c55e9c393d89b9136479178e78b3d22065c5ea4e627f1ddee36e700871c3d1ff11a078b0de301ff5f3e0735be2fe0e1a6bfcb09daee7c9f73b05d9a08b8fba73c263b375284000e70c38fe8ae7d10ca780e7b4e15f1963ddf6531d8ef4d244eea475ece12e7afd14b97a84455873b66ed28c9f448a5458ffa383583ce163ebc96232804d2aec2ae253918d007cbfab103ec79af528f8f30e8a2c967f5e48a0239ac6cb2fd08f42ef433818e16abf3049ed109059d3c8ff8176cef36e61b5f244a66bf63cdc1a9a24ed9058bbac0cbb0b7f459147820480d9d2ffbb58d6c261081fd0ab413e02f31b7bb08a61f60802454051e0add16d45b1f679f47b08ee9ced73a23592a5fb75c92595608d56a58a85e37fdbec70da2cf276682aa667597376e4b1137d8bc67c1e3642d51f05fc17ea4bd69beca17f879767ce0d699024fbfbe2751bb68b6b8c3179c16e82babc728c43815955e6a0708882a526014ca536666b9a6102e441511d161bde98ae020a770a49267d21687de54e7df186e636d7f2a4158f79a24c7f0f2a1fa1a4edff386fc866fd82a02d2f090f56392ee6bba07403c23548c7082a008f8a8f69da79f657e45b9159ffa0e57af576b8d471821442f19573c0ab80cac361d3f233b35f36d02408173e5481e80b3384b301aae5043f1e44b2ed4ed0b4d4d9cc715260cf23b0ecbf0e8cea4f9b0f02834a187ce342a326db5b99e7df3d2001e5840937039691524415146b0d94ee28d8420b0d48d68350c4581d940fe4a46f30259f3bb968a1ec6cacc9f36103eb5ae47b3dae72b9cb9a530df809e028e4201f8bde0f55476ea3ce77cf450350e182beaa897a292537dadfca86df9fc3d4f19a33aec52ec59c3c45e8d3720220447b8614406c80011c2772fa04bd416e71c5c1d9e474e45133ff54b32e616c33ba04f3b02d34a8730ac38bec15c2b1143b320de120ffe353316bc8a394523ae620639d19744c2f589addd14ccfc4fcb59ef589bc014837e0f6cf80e9fe14f4807e56ba10e397af189902b455422a8f744b9cb0852fc155f532f6b949ebe641df3ef1703bcf9b00f2ce77a7eeef0c2d3eee472b74b4c7ad2d3fb3c7253f62e750b3ff0553e5cf29484d0d5880f12f0522828e7193fe07c84455c8f20bea2214e9c7942a890c519cc1887287addacce68c7f9bd5567135b0c7fa2d7af0df554f922f6e148a94bcac42bb10d9511dbacacc8686e33bf13f04af18b7b6cc4b60fc824a4d2c40ab083895aa4d5fc36499ee20568750a52a3c747a4ce2b36fab8434d8c63fd32b6a0970e033a90b0b4e99edadbd8b73866ae9a724b68c2cd1c2b6433996e0681f2dc62659bedbcccb97d5b347fc3c3235b786469662d3f44e7e2842d2041ce700a248203a850c5f0a8c4a93f3aa8df86f0ee2d00ee0fff037057f49887391d5df7bdb61c9f9053c0210f410526ec970ea16499168d72a0901de8fe1a83454ffffe636ebf02ec52797c0b03dbac287f1391734f5f96c451496d5731700560731833ed30bf7629a8bef5abae6e9c384157ce9db855dae477104982a67f59f02d5fdc3548853fed57914e8ae927fa414e22db198533da50f25fdcc1b5fa8e56ed8ee493a05980fdd1fc4504b55a0f17a62cb7c5460da7206fa29b6d5adc97b3b028e43acf64004afe0ab798bad2908d5cba13abf40df83f220ca5041fadf207c25fd00940eef0f9646b3b1628a283b312406d45c9bc29604b4904da9f607c372508292478752cdd5ce08fbcf86b4a7c5f6cb7586a95429e9cf8d6bf88e4e08ae3e2593a755dad27cdc1609b68384ca8182f6df6f3ea325c1a8c0644bda30b5fbd2f53635922c36b866c8d6db45809dbe1101482e27d2cfafbf25bcc540ac017ca8d4d0b65d8f0c20aa66b164e7529d169c614494c84efe2be467c5ac9a25eb33bfd517face53c556265000c559563cba778ab56081b807c5faa877c00f466ea968c7fcdae0903afd80171cc13dd22766f2c6f6118e5b5101e909f675351d352bf37f2d1925e95d09b4c4f6ad622d65509173c40464e07d7f90b000b92ddc972d60506dd6f20be06d533e851b0e716613b8172c154327a6b6528214adf4c4656771cf0f1ce2461fe5d8293a2bca5c8f14178acf16b1d4457145698d30984ce47af150d4e676dd0d34f50e1759963bc98c34a90f4adc1c66ff4eaedc4cf02a653290b0ccf5b8fd7ef29d30a61793c67cf8319a8b7cdbf5003af6e4e119ad59ad84beb3496868bcdf1eaa3b6040c8eb29f9dbb7c7a0b54e8f0c57afd60afd6af472f6083cb66ec1443a2df55bd5fef8ef5c2dd61ea953a57dde5804eff26d9dab2caa6db19160a08d3f5dcb68a57ac1de5fe2700ce2d45ce55f84659a23c193d968ea319a0218f0e5dce143b4dd6ef8914aa8ed4aa266c420de0e5cef5e92f1304b4e54d85c5863b5e684796e9338d1f1795b21f8b114a70b165b1f59d4c3f3e03f01f15121ad52f4c68ab2dd6a4ef63ed822fe137ff7645d0a1f8f0ee7f5458781a26b27b566b674362cbef53a69a122a01c3c1025c5fadf2e0f45400228c6b7ef79354d1e39eba2bda2f01156652b5b8939750d58c85f022392dada9c1f6748cd8ac3e202df99dace33f2a477ce552f94503439e2bc8296ae9c1623fe9ec199582f7f6f1d8b87bb6b126166698fb7ec7769c5677b698482fcfa82412616b4f4c251540bb0d59a5de4972ed035830b4bbc2de29be96420403c551a90a9418c4e7734b3266a71e07d8fb645ca81866eaa65ca3ec66251071cca34b6e05ef34a2c512fb0d818f62c2a573e1f1248a4dfabb7d603c55a046029b09f0c496dd9978b5a3147fcd0000000010010000000000001701000002000000f900000048b2d77e087b6fb5ad305f812df8cfe64edc0712802878412324740074969446e11df063c61155a961905766f9c95d43614f62d782316f0ce93008a031221a668225c84605e839eda6006a54a8035d092054fc7ae062aca92dd484881ffaee844da4cccf6a4e8ae7b505849ea93e7151b2037c1334cb4b2c010f5252ab0cfb9c79bacb36fca2a584dce012eba3b29e286fa19feae5683e4ea7d3826cb2068d887203da0a9d4fc83bd266cdcd0e7a5d5c554c988488d8f308ffa6f774af496433efa77c55b59946b862a3efc53eba8f0ecd53f9c50b7ec7ad1a07e06f52533a5414acf909cef47d2a65a274e6a3bbe73fa825c1e117fd65ffc4000000180000000000000017010000030000000000000000000000180000000000000017010000040000000800000000000000"], 0x11d0, 0x10}], 0x5, 0x40811) 19:09:05 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0e20200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1389.695177] binder: 666:674 ioctl 40046207 0 returned -16 [ 1389.749782] binder: 676:677 unknown command -13 19:09:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000483]}) 19:09:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0x400140) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x800, 0x7, &(0x7f0000000040)=0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1389.803614] binder: 676:677 ioctl c0306201 20000340 returned -22 [ 1389.856188] binder: 676:691 unknown command -13 [ 1389.874630] binder: BINDER_SET_CONTEXT_MGR already set [ 1389.896009] binder: 676:691 ioctl c0306201 20000340 returned -22 19:09:05 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0f20200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x4101, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1389.902384] binder: 684:693 ioctl 40046207 0 returned -16 [ 1389.950249] binder: BINDER_SET_CONTEXT_MGR already set 19:09:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0xfcbc, 0x0, 0x0}) 19:09:05 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "1ef3cb424e5fa77a168b2d1f72e68b65296ebb87fd4c125bf3a32c39235f7fb2bb5e0cf58987755f25f887b1ded90627fe3d443532e23115ff36aa49f92bde24e9449c19ec0afa51d04eddebbf927b6832e88fe0dfd35edc8aab852d99714c62b936aa173ec559b2025352318d9248f0dfa9f8cc317653d9c6f91dddf7b3e715b0eeebfd9901116d3c"}, 0x8d) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x1) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x2) setns(r2, 0x8000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1389.987711] binder: 696:703 ioctl 40046207 0 returned -16 19:09:05 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c1020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x8848}, @val={0x2, 0x0, 0x0, 0x2, 0x3, 0x7141}, @ipx={0xffff, 0x114, 0x4, 0x11, {@current, @current, 0x8}, {@random=0x85f8, @random="735f98bdee56", 0x8001}, "2da0fa206a6f52fbb30a08f2399e12d16f6925b67976ec66c09b419251bc7a1a614a414be846e042584e5c37d5a057085cc67ee0859a4829ffa36a1993ada8bf161e08bd4d3ae08038bca7a5caf15debc6067ea18f0bffb5e49995bfc8631e567bb4a42823921384cf8616be994e7a589bb65c3ae6d4796af01c99fd9af42a8f3ecd7c275b553c98c091a7799de2a2b52470956b588f20888f90f59f27bf770277ff4a9b78987bb1e603aa8543800e0f7241605d112c030ac999ea4934ae304ec6e43a8c3cc857937661cf5e2e80cdc8a5d5313d4f8d0005e16ff49ad1b009e5fc441e92275e8c8fa4caaba84063f0a50b9c487235bf"}}, 0x122) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1390.082457] binder: 713:714 ioctl c0306201 20000340 returned -14 19:09:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000484]}) [ 1390.139230] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.203505] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.210512] binder: 713:722 ioctl 40046207 0 returned -16 [ 1390.243379] binder: 727:729 ioctl 40046207 0 returned -16 19:09:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01a488052ade000000fbffffff0000000000000013fad4063d474236650276c8713c99872fd9e77d90108316fde14ccb67c74252e7bb43548e6f1bd2567b795a981d4e2c6c59ca0dbda7abab4baf2cfca05595a29a14eb89e8e6065ee42690bd4d443c933c1fa5e75f0000000001060000b2740d6cfec86e5b327416301d47f2aa5159b612229f9a9d2c50b1c7ba173b6076c852545c9ed66555ec6985e188"], 0x0, 0x0, 0x0}) 19:09:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x4401, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:06 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c1120200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1390.265843] binder: 727:729 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1390.411165] binder: 737:745 unknown command 92840961 19:09:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) 19:09:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x4a00, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1390.440046] binder: 737:745 ioctl c0306201 20000340 returned -22 [ 1390.460558] binder: BINDER_SET_CONTEXT_MGR already set 19:09:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000485]}) [ 1390.496135] binder: 737:754 ioctl 40046207 0 returned -16 [ 1390.517731] binder: 737:759 unknown command 92840961 19:09:06 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c1220200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1390.551746] binder: 737:759 ioctl c0306201 20000340 returned -22 [ 1390.562194] binder: BINDER_SET_CONTEXT_MGR already set 19:09:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x4e00, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x1, 0x800}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0563044000000000e39fcfc772ad25fc9bb8bf830b2bbf02e6c8faf550f1ffc65171356f30cf0d06afe962608551b07d63f6ca187e0a943c712eac475adbcf537a3b63335c1ad6be589fd23852dc1d48546235ad1d970da881234fd892a6e089e849bed97a5a7e5512981163d2210c48008d61798ac1c8f0cdf403a05c87905999b43f8f6c09a300f231127e000622"], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 19:09:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="acb8639383fb2ec2f19d6964fcc22a40e2bb81cc"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x3, 0x22000) fsetxattr$security_selinux(r1, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:ld_so_cache_t:s0\x00', 0x23, 0x1) [ 1390.650593] binder: 760:762 ioctl 40046207 0 returned -16 [ 1390.651010] binder: 760:774 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:06 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c1320200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000000c0)={0x2968c923, 0x7fff, 0x0, 0x1, 0x10001}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000040), 0x80000) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xfffffffffffffee8, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@fda={0x66646185, 0x7, 0x2, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x14}], &(0x7f0000000700)=[0x40, 0x30, 0x48, 0x38]}, 0xfa}}, @release={0x40046306, 0x3}, @acquire, @decrefs, @increfs_done={0x40106308, r3, 0x4}, @dead_binder_done={0x40086310, 0x4}, @register_looper, @register_looper, @dead_binder_done={0x40086310, 0x4}], 0x3c4, 0x0, 0x0}) 19:09:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000486]}) [ 1390.832266] binder: 785:792 unknown command -1822181204 [ 1390.846993] binder: 785:792 ioctl c0306201 20000340 returned -22 [ 1390.888355] binder: 780:786 ioctl 89e1 20000000 returned -22 [ 1390.895798] binder: 785:792 unknown command -1822181204 [ 1390.903539] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.920031] binder: 780:796 ioctl 40046207 0 returned -16 [ 1390.921191] binder: BINDER_SET_CONTEXT_MGR already set 19:09:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5003, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:06 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c6020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1390.942705] binder: 799:800 ioctl 40046207 0 returned -16 [ 1390.949567] binder: 785:792 ioctl c0306201 20000340 returned -22 [ 1391.000478] binder: 799:800 ioctl c0306201 200005c0 returned -14 19:09:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) 19:09:06 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x81) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x94e, 0x7ff, 0xdbb, @tick=0xfffffffffffffffe, {0x4, 0xde}, {0x5, 0x7}, @ext={0x41, &(0x7f0000000080)="5bd65264779aae8a0ac0ddd3b21435108ccc3f8c0c63cf6aa7b30ae2980c5716a4bdc9866c6320785bde871f287399a3e0a35077817ecb23bbe09a3ec913b422e7"}}], 0x30) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1391.046807] __nla_parse: 34 callbacks suppressed [ 1391.046814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1391.062451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000487]}) 19:09:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5603, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1391.090786] binder: 799:817 ioctl c0306201 200005c0 returned -14 [ 1391.112071] binder: BINDER_SET_CONTEXT_MGR already set [ 1391.117892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1391.127854] binder: 816:819 ioctl 40046207 0 returned -16 19:09:07 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0003000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1391.177949] binder: 816:830 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:07 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x125040, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000080)='/dev/urandom\x00', 0xd, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563049d69000500"], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x6, {0x4, 0x0, 0x1}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x5, [], &(0x7f0000000040)=0x99}) [ 1391.301669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1391.341641] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000488]}) 19:09:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="016379e32173040000000002000000c0f65c57ce474a6bf5d36ac23b5125bdc50615c1f3d825944bc799bf563fb08e53fb69276367629c2d4f3c19b4bc14e48524c5e45b326f0daea9d40b9ed96b8f40d1d784d5a3b2e1b271d3a31c658b040d57da337e14f3dff4e512e024528e4a54af3c90c17ed972c19b5d3837a2cdd063c556ad05ab756cb4b283f5334316644184edd798c36163bdd825239d768e8b545268ff56d06bcc11999bd50eae69d105212f8ac5d0193eca8d24225f0c2a2d68325fa1acc952050498b6c41c3854eb7e97e220b32337ae538d6a57f334aeeba2f3153e0948f351c7bfcecee96576c29fa9ee74075b556366a048"], 0x0, 0x0, 0x0}) [ 1391.353929] binder: BINDER_SET_CONTEXT_MGR already set [ 1391.359260] binder: 837:844 ioctl 40046207 0 returned -16 [ 1391.360582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1391.366914] binder: 843:845 unknown command -1660656891 [ 1391.397925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1391.411923] binder: 843:845 ioctl c0306201 20000340 returned -22 [ 1391.459420] binder: 852:854 unknown command -478584063 [ 1391.461156] binder: 843:855 unknown command -1660656891 [ 1391.489947] binder: 852:854 ioctl c0306201 20000340 returned -22 [ 1391.496447] binder: 843:855 ioctl c0306201 20000340 returned -22 19:09:07 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@bcast, @bcast, @bcast, 0x6, 0x7, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="de62030000000000"], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3, 0x0, 0x1, 0x8}) 19:09:07 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0209000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1391.508481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1391.554047] binder: BINDER_SET_CONTEXT_MGR already set [ 1391.573014] binder: 852:861 ioctl 40046207 0 returned -16 19:09:07 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) r3 = getpgid(0xffffffffffffffff) getresuid(&(0x7f0000000140), &(0x7f0000000300)=0x0, &(0x7f0000000680)) r5 = getegid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980)=0x0) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a80)=0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000b40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000c80)=0xe8) r11 = getegid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001280)=0x0) fstat(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() sendmmsg$unix(r1, &(0x7f0000002ac0)=[{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000040)="6730ba67fedaf1b3723bf67943ae6f6f972caf6a4eeae7ca85b8a8ced75761f5a5f855be57edf7be015b8fcdf1f191d9b5f75212e55fc0f0f1", 0x39}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000500)="89eff53251c7eb5b10cbbd0d87be708b7501b1f5d13cb7e3bc386c274cfb0dc1b43eaa88d1eb8082a8574d798473609d10185abea8ee11766f3a02061265023c8b8d7f7783d78f3bc61cec74421eeb0e0963ab8c88b9ad41e10dbcec3af0da04129e7e2cfbe839ed964c93497aa01fa8a1b7fc299aa689fd3c091fdf26eea3de4e504ddd4c98f30294646b39c2f41ebf7641be30110c591018529bd41baf7defd64bba646aea577e8c9c8969733dd9e7a64e402aca1b80f8d01c00923f3df42d5612d70976d29fa661fe484e8aacb598799a05029e99b8995c9ebe1402b57f506dbf9c06b3862dd23e", 0xe9}, {&(0x7f0000000600)="93a3d94e6d289e389e682c6b461dacafbe905c4cecae01bf6f202648d144a6f5dbd82fb5754e48236bf854f1502dcec481339a6220553b19268ba3b6beadecde634274517024ae42b48156ce6c9022d3312c4137f5720dffb6fead686366f904", 0x60}, {&(0x7f00000000c0)="f32e1d66356ed5e9749b870cdd95431b413b3e72cf1fbcd993639097811887d4a843030b660cc1dea44045cb2dfb6fb14439", 0x32}, {&(0x7f0000000700)="741ad2341359225670e1427a6510b16bda43175f902cbe8c51155fbc371b4d4c3a1018fd48092c4455dcfe7178c1eb102fc7fd6659e0a2e6ff93552fe2393ac0e6160475434ebc746f15667ce8ab", 0x4e}, {&(0x7f0000000780)="e3812433cf292281aa72c4c70aca7ca1480131c613b358d200bc90c0c37e1d88e6b7fbff653129126b4bb48c5e60f8fafb35e9d4a8a2daeb724a1eeca48e763e00aea941f86e6b6ff7d5d053650fb8ede502ae804fe58615fa56f2944a935aff3806a3bfc8476efc9c32ff39c6099a2939e3ba709c7a93aca773c4e61ca0438fd256b4aaef1bfe9b1a8bbbe32350b8fd5930fa405895949c05cf9143ec33440bd7a096cccfb8e37c254889e7ed8bdd518c4387fb8e", 0xb5}, {&(0x7f0000000840)="5b0dc25d939c303d8590416f166034bc721dce07e5873542697fde7b7ca000ab3d246920e2a7d606e852f90b04f6663430e0110ff6eee6f968b594b3ed2a1c861f3bf6e6de62d5677014407e632de36313f4b5cd368984e8a9e515889f09eb16a069e806853bdb89fb591a8361e7ce074ff092dc7a27e907e065449888cea567eb52f102cd882b147bf30605d43be117e0a0a031c3ae0548dda710a88947f918", 0xa0}], 0x8, &(0x7f0000000cc0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r2, r1, r1, r2]}, @rights={0x28, 0x1, 0x1, [r2, r1, r2, r1, r1, r1]}, @rights={0x30, 0x1, 0x1, [r1, r1, r0, r0, r0, r1, r1, r0]}, @rights={0x28, 0x1, 0x1, [r2, r2, r2, r1, r0]}], 0x118, 0x4004000}, {&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000e80)="a1ba9dc4a58d5ac67ea163c800097541472b5a01765da10354d276eca1f9a123b0a63daa06c06854c78b57b00446be243a6fce38bc1b352b3c8d6f4218f13754c249aaf77e5c894b691464e8ca02dadfd2abc9a38ae9575835d509f652d74573009736e8f9260a87304ed92d98280aa95e463b465d8977fe88d0f9a3394079d37af638ab6d27df04015f1910135f5c2067bb54eeac9c236719e4", 0x9a}, {&(0x7f0000000f40)="00cbd00d9533111e28fc3a79d80492d6534d268b28abb858f1b07fb63059794263ca4c92b10d96efa67a1fd5ae2325859e98e3c368b6dc62aa4a6f3b27184f3b261e74fb1df63b1358c14bdad7bd9f33754986428602343692c011a0f8ae86ec5f088497cebb819afac109709f6a5c807a143efbd67610e274953f4db3e4cd48df84f2e147d69825df7d83ab2ad85e3e9a04a61a16da6d8a17d05f42ae85c06699faac4e56f5ee73b302138e12f4df56596f9b81", 0xb4}, {&(0x7f0000001000)="ec3329bfd5eefc0dcde08b79e8bdc2690d73f0dd94105f04506c5ba65bce9f86d88b0385ae1955ba92dcc0927803ad26994f8c4586b4e474963f454e0e5c0e184b0d58a3b206a8f7b72308e56860d47a7efa077ccec735da21134d0a34f4d2c85ce2da2d8bbfb9319d1b806950663981a4f819877e5e33af1e6c3be799cad4168a4f1962fae513da40ad97e8c8ba3f81ac64b576b6f7d86a9abd4e2d9112e42da3033e405034a76d2d92b902345eacf4abef3f5541e05657e19c7727e587", 0xbe}, {&(0x7f00000010c0)="9d2f2c9cc3cd554a74227e58bdad65772e5f045a43", 0x15}, {&(0x7f0000001100)="63450d4d178b9d168486103572bdb8daf425a72c2904e446ae2cebbc3d565dcd5c7279c673e32e52e988704165012d847ff411551f6a534c46f9a86139b7fd164321d2a543bf38c6ae7644af0afc01fdf1900b4c9879a64741e0cb1106ca5a015100fa01473b6a41ce7bc9d2f5f6fd65ce940897b9538c75d559c2b717ef72f99202da9131035e64d5533c51d8be87b266874da16bdccbef67690a7c65ec5159a7c5deb08bad970a1cf6a2", 0xab}, {&(0x7f00000011c0)='l', 0x1}], 0x6, &(0x7f0000001340)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x20}, {&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001400)="7dc17bb9442adf1705e55b6ef6859a5a99baace909d8f31e3a458fbd05dbc0e852f4e358e5e60f991010c19d9a2b7393f937cad7412a44529ff5d8d061e7f211f12e247a672e2f5d3b7706bfcce46bc442bcd6e00a4782f57d2913f2f910abc282a799bdefe7cc304cc7e285475c4506ffdc9b36031a7cdbe5184431226f88693b9c0298aa22270604be18a1227996c630f3fbfd4f51f735af1d43e209dbc6d54d57d56916ae44773fc09f942fb1b424bd52850beb98539b11d254b3e84db1dc0ef40e0de21c", 0xc6}], 0x1, 0x0, 0x0, 0x240000c4}, {&(0x7f0000001540)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000029c0)=[{&(0x7f00000015c0)="4d11ece9c14f970d06206a0cac494282365f789727e6254c9a978fc5baa0b770c250958d7fe52fcdc977d286639941e509ab6460bcfdfee3ec55b94a7805f59382d3ac09a8895ef2b7eaee9a29008bcb21a025904574c538539203dd2db785f869530f71f6a3341821958e603f83e826afc6da23092ab65b00ac3ac3a5df34fdc59193210a1b593f8fbcde010cf6c91716ac9432a77a26e6e08b1a56b26322a9831ba61af2699f5466942d414430c1aac5d3270c4cb2ea045d60d0f4938c6674c4c235268798a6b4236fddf459cc4ce6be351998c486ba48f66868b23b007457b12e578c61bf", 0xe6}, {&(0x7f00000016c0)="f24ab2da00841a5a7b96e738f637bdfe1eed2c21cf2f143b851dc7f315626033724d3b5266403e7d0765795f96a95ac51d0fdc063e4c1c136863d7fcfd3a629e72551777212705112d2c607de74e3a4a2f6423df0a5f20959458fc6bd8f4a13c6457", 0x62}, {&(0x7f0000001740)="45ab715349ee4813dd79b4cce015d4c5", 0x10}, {&(0x7f0000001780)="3e4911ae154095923e2b90489345e1bb2e7612c796e1ec31765b0c21bb3c2d518fdedf096599ade19b07d47d52c83dd5b9b0cd6699d85e1b4fa530f5ef4faffe2546a5426918c112541f148d7d3b63d4c76e4510ca3a013c59a61e7068ab29d8f43162835371b6e8c92412b0696c70", 0x6f}, {&(0x7f0000001800)="b24f9b8b9fc5cf315f9bf28a3bce8b66665fa60b02a43b6f678fd63678712e093ca5a6f06b08eb5c864edc982f3c82829aa550975a3795e41e201ccd7e6633bbcce537f86b3cfa489a9227cf57ecc27ea539fe2bd80b7a41cc2f8b4a37b4670374a950b022b04f4e640b852e0a22521fe1b76fd4665e1c4fe352f9449d01f3469ee3023971f77a50efd36ff693bd5e3d0a3edf20e39a1ed88c5f174805e9e8d671f7d461da2c2203e531ff04073150bcf6f7f763ab6303fdbfa663a045d8b6ef9add074986029ae57fda72e54b1182c25957c58c904909eace3180bb704f24b68b1908a16b5316314ccb1375a4b6e33964e945e25b96cbb9e6a1588f5aefb2183b8c39af7163228ccaf2e46732024f67c2cea9db1a5ca3d03e56650aa0e863bd0de0858dec8ebe9121cbb180ba931849fba644fb5700352da1b610875d03648ecf4c8f54f5ba078978aa869191419b5943658bec1cdb19eea167de0e8e8c055a432bf4462141742c7dcda4e3fc660bf36533f2e91315fa012864909f8986b83957d8ee2dd2844c4970b3810e7f231eba39b445636de444b5a25614ad749a22d79ca1e73ae601aafbdecbab335c6d4cbfd26f3236ff4c82397b07590515355eb039de4531aedac827ddc9058335d930b25b72d1a885ea5ac11f901f1d579f5a710b6c353e405c291fbf94ff0a2bae993564a05a9d34aa7fa67ae010f430d32df600facb3114d1f2d7dba1de85e1e9ce9221a026e7900c6af70a1cbb223cebb31dce5ca608f66a01d4c62da51508c62e080077f9479f40add31e9e06145482025e5ac6e04537b0a6549d0961395f5235c71122bd463cbfdf1a3ae217f74ed7f94ea9def02bb1eb0c798a94f11add1af26bbae937f6eb5cb0dcbb53041c552b7048980b245df2ff71805005fdc0dc0b0952dfa86f486468696a6a8d80ff74b3deeba071adb19f672cdf48ca256b9a3719c7119bcdc0456043772a6916e3e7c370c069221f54e64e9be6450135632768544067a8b2ac8fca29ab79d60da2852820cf955eac42a0ff3a49948f87b3dab5dc65afeb8d19d95e34b67ed6dd04f413850a2d380134c956ae65d77ae41826808f24edf75e769518cfb27d3e41235d97d9696f29eaacea2bf2ead17c020633bfae0c7594e836510054d00546e915652c7cba220919659bb572fa9e3213aacb38bb67479fa93cdc026a8df5f699bb28126b70544bd12faa5f4ba90c1f4949fa9d3fbb1c52b90a8754bc4acff09e920340d7004c40772384a9eed1a76dd3beb06d756cefdd067b5d282c1337608c5bc44199d89f6efd65036bf2e114f11e11400f0d21502c5dc98cb956cd4627d9b4f7a0925cf205e2ee01b98dc044ce4c1349f3b7d6f35b0c3369e150c44bd6a1beeae0a2ac1856d58531db14995ffbe48dc6a3e35a84dac11926e5b5dda0a83dfc4efd8d79079725731a835a12822a09397240d257795f6f01814b8f296c307ffa4d8430c90233290c505d3fac7b83c277fd8e4a34dc40d26f9644ec117af09a5aa58e30b978aad228937b1f1365045114c4fe62e15a7ca64d0f1a5ceddbaf27447ef92ebb6112d0bd0ecfda452ed37c7aa5f7a58c117a32623c155656c6c7428634adbb0e17c35bb074892882787505a7583248d87846871764327c0d70ad812840b2cbcf32d0233e2c047cca1c9899ecaef908aafb5cb53a24e2852cc42be86ce9395db60040570eb59832e0623842b6ceea0c4c462afccd4bb196481448eba13fb93c50e117b9ff33db62a1c948967ecaf3328154889f3aed9a467e26dffb5940a48f84cb318b618053c4fda8c513d73367c59e14d4586ad45dfa847c990df1fce3003b7a99b4554f1d32d42ba194a763a2c49772b5dfb8d77a09b982882547a01d5ddf928883726fd18e81a001a4750f82f4e0a406c3ac87c7319eea420945274a098f1a5cb070a3bd7f3467bfc74dc40d1e1bb3c08866d5dd81588470f7da127e6014b6fb261c8d2eff27d2c8cd7545e3b930a2fffaacb0c95a2dc9618b6bd3d4ec6ae191ab23ccd72c1b3f84584d60fc19126edb0cff41969172c0b654c2fe19695df5cd8c5f99708b914c0d75e20a29f57909ba4ade6372e302d100ca45f7a6eb598cbe4e81773a833db6e8079b0eb4252b2de893172760ee990156a45ac063ccd1f052eda2a5e07c5a6f45f13b684dc6dfb029fa181bd7210b24817a0b78c6c4b8a4f7c35924611d3e53c8ac56e5b4b9f49787cd1d36a0e17dabcd607f87054eddee483a1094ec1468b46716ebeb8477e1ba54a1a95824af2e29defef2729cfbfb78c979dd2fe1dab4c8f37c7c86faa183ef895d32bc32e7ec65e6ba15d2f4d6204edcccd9c31589fddb47e7f4685cb33c55886abd617a407a186d227304769c32db75288d27d0ddbf321b76506a35b547e788debb3d29c407ca66c8d6468eb87b253f991acf1bdcc0463d30fabaa3a67ad7282fc874f0c651598e94aa90c5370c3d646abf688bf55b78d7a82377407e639f14d5b3b3f447f4ea3710484eda8357fc5026c01ba32a0b329b425254c80dc72ea58c12852a0d418658b2da75c604c61f0837b0b04db78343663848f685130be2a1c50e0bbaaa31873e6aec1021049a0c508600f99941abc6414b2b73ba87a3668d8228abda6a3b47afc056907a09431346b622fc1c2157f43db6325a383b10d0d0344e3a2966564dd5e5785f86361c1ca3dead4fee07138efa8d1eb7968c49d52e95a453cdcf0c86018e8812c63c45c5d8fbda8ef0fbe17cbde232f5f95741389e21af54596ec7023c609e9a73c5cfa398f88178bd5e2cc791b48ce365a96b3baea66ff7517461303d1742781ab85c76fd45bdf77318991a2604da8d49f6da0c37111b89c2b9bebd04427bf764aa60f44b37a28adf0f87784285704468ecf23308506757ad16ebc1865e416cbd250394bb04268211bc594ffb3abc036a400d816ae79b22945089840eac30eee1dea0c930223c498ff860198fda79a0354d32829f67ae61e83243016b9c0b8e3f8c77f5542f27082835da8038eb29a35759ba6c0d5ed1f91d2746d96e492ef81ff0e007932a59af5868b91ffa2cca2c187bcda3eac0154d316cb2e0ee79152405747a91103f2a90673583749ced7a0d8aa8f69a668253fe3d1e25bf7aaf55cff0f4d00bb27c50912e0d37bb7eb8e6983cf6b45901cab5b460a9c31282a68681ba85f84708876a85814e4fa818327f9f2b570de5e1baa63738ee31063d990951297cd14f35c438ec6681ebd93454acb1adab92e8d20675cb4fe7d9ed4118ccfefce41232cd232083336d5c29f28018e41238fd2bc4847916496315e8e3a5ca823b777d72eb2a4f2617f0c8602c3123706d457eb59fe3d6309083e39829d72953238d4983a95f83528bf364df43bdf0d49c07bb1d8166b5521569bc32321361efa71e79c2a4be0f1fb1a16bac11b73fb30c2ad281cca236145a8aeff889e63ceb31b3871e2aebbaae8fdc32f42c19edcfaba9da071338eb04fba37d3334f27ef416cdbb3c50897f702095136275ac098d0b00c4a13f01b77af7855a0da0f7176dce58135738ae1aa3bc7337bea0a05e1d0d045b27ddaddb37548dd45137a04446db711ce6e0bb499632196aeee96f8f02a86bb57071e418915b2d84283ad2ef20767d4e2ae1547f33297bae6ba2cdfc31a86820c0d83c1b71f8959d994035f9339d6eaffb70817bec2fe27d3cecbd3314791584b48307b311e0d6adcca2a829881bce39c9ec416eb64017fc251e9a1c914015c152d311b7306877b5eb3d8429aefa9f9c7621a7e9c60f6fb8b86def16cc2fb59fe3a93fe0a36f3a25795942a52192acf402a409ebc60cbba37ed20386723963362786d94ca2e1d3de9d9138a82c5b239e2e373a41133ad523b61f5e96d54ed039c99b22839d98666e81aca4a5287eeb0857cb99b10fe2b1a454396a2430e89cfcfd184dfc4b0f6f542637b5c4649188956c66073d436cd801703eb1aecfeed10c836834ba87b558d8e49e3f3e7ff6787668edc276479f92e902e0216a2b172ad64ff49609dfdded8e3012284fb7b7a1b0294742c29cbf483eb5ccc0d4258aaa5390b517b8b3db61e9bad6f50f5c914a65b978bcf31993ccb0e2214f59d633adb70ccf620dbe9d19053d3eea98187652488e76f495ea9ec4a0a76c56693ce7f7cb60fa9abe322924579c5e38715143ac288b0df966f893389a51ab7db21366106194e67b397b49f053cd56fb57aa0083e6df870a2bd89645b2225b820c443316401f95ec8d567df70856c9804d3ef3c792dd87aa41343e03138038eb58b153506cd5f902ae0b9ad1a92e3b765655e370bb27e8d2fc8c27426480402485700d6c90a8a4510c39e6ea0c3662bca5c49ca90e5d0de8a4da1cc8bb4e91a7cc4980bb19b569a43c6dccf99f89faf88f39842a820ffe0f3ac55315ab2fd070455dbb13c88dd62379162a949975561106af97a690344bffadebcd454fd22a65f7b7c846bbd79e914e4e4717f4ebb4106fd05482d799614e95373a4b85a70b3b1c4180961220cb92668d803b5ee1dc658906aa96f33be17687ee14a660445a914dea67c860ab92c00a46cf41043df9d405cde29fd94ed55431799345157268728d97bfc1d5baf13e3a944f4b31f0a7853007e4cf8d62c77eb29cc636af7645e04c7df393aa3c1d684db06f647d6cc2de0cea5d485311dee5c8bbc63e507c32c1e990b8199741003475dd5f06e0f5b8e951e193ab9bc7e3e565460f0aa12b94f892f494d672a97f90853c418a4967f336d04a358913e54f1ab41e1f714ed9f41e2878d681289a5dfb5a4a35a83ce3e495d4d7e5517f2e941466e6ee2b04d82704e0f481a32af96805866243a62aed1168e5ee303eaea89914d9ede1301ad40d1e3b86fa2bd1cc306a2e7224c87c98d05af3d3e230bf5a638d2e25d5bef12aa1b18b14b1fe26a9529a2a624ffe61373969eede35cc81d96885da9d127f23258c53ab387a99aca9b0e213cf939883545d018b03e908504cae8629d859f0f39d4710c118ffaf3087fd85b0dcc11dd20dafb732902a1b1eb8358361e1e80ab528e974f273fbbfdc398c186012ab1a0ba778896be9139ff91f4b2c0d0b2311283b77c52d85f7d4cb30b4703ce23d17606bace23686bb27b4f953c1c5c43f550b82524be7239ba15f0de8fd254ef0c8a0894f4b740ce891a8116d5987828c99287c086a05e14375f92480a04d4dd1fa616795cdc97d9e8f0137e10de0a32bfef5bb95deb265aa4af4174dd682a5e681ba14cd9c58c0b17d3ad0db6a308288d0f84c0815b8afe7aabe957edca459ba6f34473ba86022bb423372a80085f7a89fd08b9c3121b625f1a3206ab6d421b4066bd736fc23ffba51320df8461a4d1b19408e9079420c99fc291cde1413a914b8d1d003d0176caef2ea11fd8473c58322612d9efca299588bc7b07940ca3022ed47affcef42d413d50db18ebe92f358c08d741905202babe959ea5d86c15c575502cfc1a8cc1155853692ae670d0219ed8ea64bf9602a196564d162a1713428bdc2ce605f36456beeb33df2b1b8ec8c4145d24b38db2c2680d3a946e237e6886d8fe165594b998ddf3ddc0ae5e75c577226f66027c15e53103981c76749212e7465e8f26528e7efbd30433201f5a117355aae32f6152f41d91797cb35b4652ac4b3dce1dded9d0066d952aae4c39284be475c4c1c9de2c6e53b9c782f63c99dd28de1f4812052f4d39a3d3443a3b652cedb78f672821e2a8c1e627826b93e1697b110e9844d253d5957", 0x1000}, {&(0x7f0000002800)="3ae96805e373818ee5c86bd59b", 0xd}, {&(0x7f0000002840)="e7c3c3e4599b978ddbd866da642f3653ddddb04513d403a727bd6dbf7ebe94a18d268cdb15ea75a5", 0x28}, {&(0x7f0000002880)="fc350770865f1a4d4bf249df82c0ccc0850c33185f43ce20ebfb3d5e7e8a8a46371e9a55c3825a3fdee5ac4252d23105472840", 0x33}, {&(0x7f00000028c0)="630798e8bd5bb622eecb209f1fd653ee5bf8b0a907a693df436d580ff24d46c72574b8ddd2d997ad7c86080a8c428d2b897739f7b833da89c4894ecb19405850e56ab7beaaf9a602fec1eaeb84f152b841ff5341bb47e7bf3113fa8a59f3f732948ce626dc2915993b71c71d1da958d28ec8928e22bfa7e7ca9de8ebe713b7e98a370ce3a9154f32349b655cf9cda8a9410e0ee4ba26a13334cffbeed5694e66f4589d4d1f1be2b0a00b9e48433d321f8f629470f5ccb84300ca0afacfe60b7592e31b", 0xc3}], 0x9, &(0x7f0000002a80)=[@rights={0x38, 0x1, 0x1, [r2, r0, r2, r1, r2, r2, r1, r1, r1]}], 0x38, 0x800}], 0x4, 0x8000) r15 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044000000000"], 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x5}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000200)={0x1, 0x8, 0x7, 0x0, 0x0, [{r2, 0x0, 0x7ff}, {r1, 0x0, 0x8}, {r15, 0x0, 0x6}, {r2, 0x0, 0x3ff}, {r15, 0x0, 0x27}, {r2, 0x0, 0x81}, {r0, 0x0, 0xffffffffffffff46}]}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) 19:09:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000489]}) [ 1391.613904] binder: 852:854 unknown command -478584063 [ 1391.621623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1391.633944] binder: 852:854 ioctl c0306201 20000340 returned -22 [ 1391.643017] binder: BINDER_SET_CONTEXT_MGR already set [ 1391.652959] binder: 863:866 ioctl 40046207 0 returned -16 [ 1391.659293] binder: 863:866 unknown command 221918 19:09:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5c03, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1391.691974] binder: 869:870 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1391.698426] binder: 863:866 ioctl c0306201 20000340 returned -22 [ 1391.699847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x400280, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x4, 0x9, 0x9, 0x4, 0x13, 0xffffffffffff0001, 0x0]}, &(0x7f0000000280)=0x12) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x5) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = dup2(r1, r1) getsockopt$llc_int(r2, 0x10c, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x24) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r3, 0x890e, 0x3, [0x9, 0x8, 0x7]}, 0xe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1391.734505] binder: 863:874 ioctl c028660f 200000c0 returned -22 [ 1391.773468] binder: 863:866 unknown command 221918 [ 1391.796949] binder: 869:870 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1391.797951] binder: 863:874 ioctl c028660f 200000c0 returned -22 19:09:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='bdev\x00', 0xfffffffffffffffe) keyctl$negate(0xd, r1, 0x5d7d, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:07 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056326e50613f9b7fee8461b24940c02c27ce2cdd8250afda697b046b0fa806aaf73a534c8a4eabe595a49e012035e29cc39c1c7e2eada0100b4c25346390758186a20f5b37d8cbdcaf944dd27b0890ae2000000000000"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18) [ 1391.857319] binder: 863:866 ioctl c0306201 20000340 returned -22 19:09:07 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0309000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044700000000"], 0x0, 0x0, 0x0}) 19:09:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048a]}) 19:09:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5d00, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1391.992658] binder: 896:900 unknown command -450469115 [ 1392.019034] binder: BINDER_SET_CONTEXT_MGR already set [ 1392.030060] binder: 896:900 ioctl c0306201 20000340 returned -22 19:09:07 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0409000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1392.052729] binder: 894:905 ioctl 40046207 0 returned -16 [ 1392.068490] binder: 902:907 unknown command 1191469829 [ 1392.079023] binder: 896:911 unknown command -450469115 19:09:08 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2040, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x202001, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x1, 0xff, 0xb8c, 0x6, 0x0, 0x2, 0x8, 0x0, 0x995, 0x31, 0x8a0, 0x2e, 0xf8, 0x9, 0x81, 0x4, 0xac5, 0x9, 0x1, 0x44a1, 0x4, 0x1f, 0x6, 0x7, 0xdf9000000000000, 0x7ff, 0xffffffffffff23f2, 0x8, 0x6, 0x1, 0x5, 0x6, 0xefc, 0x85, 0x2ed9, 0x101, 0x0, 0x4, 0x7, @perf_bp={&(0x7f0000000000), 0x8}, 0x2, 0x9, 0xffffffffffffff81, 0x3, 0x8000, 0x7, 0x8}, r0, 0xc, r1, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1392.101726] binder: 902:907 ioctl c0306201 20000340 returned -22 [ 1392.115302] binder: 896:911 ioctl c0306201 20000340 returned -22 [ 1392.141333] binder: BINDER_SET_CONTEXT_MGR already set 19:09:08 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0509000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5e00, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1392.181894] binder: 902:920 ioctl 40046207 0 returned -16 [ 1392.212286] binder: 902:907 unknown command 1191469829 [ 1392.235994] binder: BINDER_SET_CONTEXT_MGR already set 19:09:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048b]}) 19:09:08 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = shmget(0x1, 0x2000, 0x1001, &(0x7f0000ffe000/0x2000)=nil) r3 = geteuid() getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x11, 0x804, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10108404}, 0xc, &(0x7f00000005c0)={&(0x7f0000000d40)={0x1d0, r8, 0x500, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x17}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffffffff800, @dev={0xfe, 0x80, [], 0x20}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000300)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000440)={{0x1, r3, r4, r5, r6, 0x0, 0xa3}, 0x800, 0x7, 0x57a, 0xffffffffffff0001, r9, r10}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x4000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x5b8, 0x388, 0x168, 0x168, 0x0, 0x168, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4, &(0x7f0000000500), {[{{@ipv6={@local, @empty, [0xffffffff, 0xffffffff, 0xa0143056be48e2dc, 0xff], [0x0, 0xffffffff, 0xff, 0xffffffff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x0, 0x1, 0x5, 0x1}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x5}}, @common=@unspec=@connmark={0x30, 'connmark\x00', 0x1, {0x8, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7fff, 0x11}}}, {{@uncond, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@inet=@l2tp={0x30, 'l2tp\x00', 0x0, {0x2, 0x2, 0x2, 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xf0, 0x160, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x100000000, 0x8, 0x98, 0x1, 0x0, "31a4513473fbd63c48354f9f61dfe23a586e8d73e3224900b479851dad995e57dce0fe1151df908e436319ebe5a77abec039d916e7985f4f24545788bf0e81cf"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) [ 1392.258515] binder: 924:925 ioctl 40046207 0 returned -16 [ 1392.272784] binder: 902:907 ioctl c0306201 20000340 returned -22 19:09:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056bd10000000000"], 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x54f002, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0xa2f, 0x1, 0x0, 0x401, 0x0, 0x9}) 19:09:08 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0609000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1392.357011] binder: 937:938 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1392.433383] binder: 937:938 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1392.483217] binder: 952:953 unknown command 13724421 19:09:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563cb56ae133c00"], 0x0, 0x0, 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x1) 19:09:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6401, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1392.517149] binder: 952:953 ioctl c0306201 20000340 returned -22 19:09:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) [ 1392.565942] binder: BINDER_SET_CONTEXT_MGR already set 19:09:08 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0809000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:08 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x402000, 0x0) r3 = getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000300)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003200)=0x0) stat(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = fcntl$getown(r1, 0x9) fstat(r0, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003440)=0x0) r12 = getuid() r13 = getegid() sendmsg$netlink(r2, &(0x7f0000003580)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000000100)={0x40, 0x27, 0x4, 0x70bd29, 0x25dfdbfc, "", [@generic="caafb83753a0a6f3417e322c681aeb5cde59eb3e420ca8f002b4a4a1e17ad2b1e410f58256ba0b59f51ff830b7d9"]}, 0x40}, {&(0x7f0000000ac0)={0x150, 0x16, 0x14, 0x70bd28, 0x25dfdbff, "", [@generic="55f84441e9ac48d4ad4d391781635a34610c762a7b5433454540e10e5cdc8d2247c052fb4bec43fa75642a05925fd67b2d1b7cb143bcacf093e9f6a16eace4e95501f9d47957f9b26981ca871bf1f4bd68eb0bd95b57c6c46649d8c56419f97a2c39b43403685c3301a9d7f7f0b6c0a529a79ef7891b9f6b5e5f73178a094031143b4eeaea6fd5862cb38b431e0a57c57dacb0530ed1fedc48b9340711f1ef7e639ebe3cd3f017b3873556cb30ed78f023cd3946e1d370920a412351dc61bbfabec66762e90cf91f13aa8c13a24ddb94a2035104b30298f8a4", @generic="c183a42e2f178cd8615ee130edbc4b172583555713980aeb66745c3391167ae8f726f9d594a0e22c88a52670b67dde016f2c9a72a1e3c1eeb2e0926d64ee7df8e63dd4a4ec7000d70d091ad6305f9cbeb08311b162a74f6475ea00897e32d3d7763b0959"]}, 0x150}, {&(0x7f0000000c40)={0x1184, 0x2d, 0x723, 0x70bd25, 0x25dfdbfc, "", [@nested={0x150, 0x8a, [@generic="188a313de86af54a1d2829a2d5623ed9738f16e42bbaf89a9b2f58f6f7f7b2177e0bbc9e44d32ad30fd892f6b601961fbe7ffbc9f458992fc2ea70d9fd7d81b0a2549572f037d0a34585e664db7899f7abddbb8735688aeb2b641ba9004c73653825bbbee8ea00f0f49c3b0db5fe77c1c3065249f665437127b34be777d20124d7a3", @typed={0x8, 0x57, @fd=r1}, @generic="e9dabc92df2b97bf232ed329289f43581a80294c1ab135af0b6a8918f651fbcfff31bf89836f18931eda600f8688fc65822dc81473cc4f58cc758aaefa148bbaec74d9778d2289fa0ba58aeee85679b0d4278c7ed2df65221e9bd43c5132dc56d44bef3c791c902182b5cd20034bc25ea1e8db7ce540ac85995bd044ed51fd740c6e5c84a7a1137088aaf3a457bd521382951f7faacd225c66477f19adf7f1cb2b6f78be261f0e5a45c40396fbe1c1dbf17684436213cc1efd48bc649c13b1b1"]}, @typed={0x8, 0x9d, @pid=r3}, @nested={0x101c, 0x82, [@typed={0x8, 0x2a, @pid=r4}, @typed={0x8, 0x3e, @str='#\x00'}, @typed={0x8, 0x87, @ipv4=@empty}, @generic, @generic="9d214fe89c85eacde7ee07a6412779485fc43d485258451dbafaa2ff8301c9b72e5f9e7d54a27e8e3f9e15d4c7e10ef8012f17667e50cbe2c1921e772161d10c08a49c71f2319e5f828839a638794efc344fbe66914b3547de34f3cb09b5dd5ca068998907c08a710d744c996caa02b2ac45dc6b361d6d81a795a161e9f76fe603da75eae6c4b44de4b34053cdb20d6a04164171d3c942b9b1c2e29072933b471530205fcd316742e1300855832916840fda504c601fef4c0f15d433ca0e4a3c700212124cea83a800724b52e3b2292e73d4df431b454c628d269766b56a91acf0bb9c473cf78d4118ba508510048f8bd7f39b5a2f3ed3f02f2c07e5b129aa61485e72e403997540c8bfd9a5ab7e78d28305ac3a1400a093cd34626cdf67e2383149c52d3cef9353d3b97164c28a5412ad93a310a508ee6605129f3aac6a807be3f314b8ca7b733d567a520751ddf4b1389f64c0a0c55bc7ffc6e0532662c568ae69fec9d01a642c98d903f3fcc83e60ccb9fbb86368cf11fa09d9cec634be757efc9ea9e0c0cb679632508dd6c36efc088cd5808f71b29ca35e63147b5930df4a6938600da80693eb8d19b7db61cfb564a551a3159a526b8ea38ea93d5ea6fcc4bc5fe9a73164dd9e0c89e1a22693f2dd83739abd3f8eda665285cde80332d4fc9630458a9b5ff95a7ef2c2d52e29b7cbff16e20c408d8923da9641fb9448f29ea41198a3eca37003e1dd8bfdb0b0427d108d333e09c5854d422ffcb8f6c791b92c86c22e8096d0781c6bc040ed13caaaa577e42888514d0d390bf7f8846def14d800f874bc3b9ded3b20744f9ac2a71d24b12847a769bb7d057af4c49d2c92d2878801458a9343b5066c227aa0ab252decb2512216381f263bd887f5c67f6cc06b37505be2f70faf0fdea0afd52dc0a596631cf9aba28dfab5a972efa7cf77a1a4fec7b22ed03425dd049c8ec956652e09cfcaac42efe4c8de59236db9be701efe2e59639f0c5fdfda3cfb533f105342a127960715b30c723f6e73d9110c96cc536d5a5f718d728ea7a6527ff66d37ea3d08040fcd5410bc3d0e655611753ee7ec5fe31373836eb92b2f196a121958cceef072b89239b285d815a79a48ec20449023da1dc2b2c5f8989513afe2253b669870a1077be324f60f82202bd299048647edb3dbb6ca6a075ebe1bfc881045e3b032303647ad6ac9f420d29efafc0a058f08b4c2bce7317a57aa26723c6faf987ec29c01e61d617717724c895dd8dd6ef31aef40b66a0bd8989f9b1149d82d00647bdc584949fd214e4a8a0b305110b3b94e2d986de9f9084cbdfb50e459071605659e8c0ef5d0fb06302bff543204cf2dd3a0e5106f87beccd256ebab1a8a2919b692c232b00769b8a9022f12b58f4fe04a0856d37c493fc3cd4537480d1423a2d4fdcb110d31d0f1bb22acb0d5b8a0239e15ad16603f9dd6f4eac726c7d9e4398f747e66df111248d56c78100ede142cd898a31d70d7bf0fbab7cd2d3acaa4b72be01aac9c18187d657d16e2b721d197defa3c66753da3e9d2584f548965049c29f9f4693fed449ea0bab0457aafeaf549d51cd9b7b14ca77f1d824e3c7a1b93c347bd87423474aa53631c3ace28dc1e40f11d98b6967de2d8b3399d288383e5d7427792037844e48f98207f38ed06015cef9993e6363842c39925ced76e3464e295d4012867ff834181987c762b8f9e06aa282051abd66728abcbaa7960f0817ef5b71d2f95c29653c71c6b18dbf561691175ba425f16485959d85cd25a25b3fc43b4f96076fee935bced06bfafb92269872c9b46330ed58e4aeb021504c270ed4a589cfb281ef7f961a48596e5d81293f2148bc6beec4e4329ac8863517f3cc2e0ad5629e2162d8394c8dac4071d12118a51a71e2abfbfd0e5738319a15fd99cedc79177327bb14e2969c5927151637f3d6d77d8f81973b70accc99d479edb670168558c3d89614e1a666e6f800a3e6de109704d3acc09bd0346417535c04cc0486d00bcada600030385d2a2aeca7099b3f841fc0bd603ff8c2031c41b9d3831933746feb02a5814619322d9ddfe3d19a452bc33a3bea9a9b4be082c0eaa523b08914681c9c349b3b208a388e8530a70bfac2129082e62326410f499193f713ec25bbfb763ae61d36589296d861374e094b19df369c3bbe485a0460ed6b41ec0f696226b41393f008d9e1d07e4319510d25bc823b9f4f04de50dbe0fc0fe8ea55525c5922f779551733b6118b331ca4419b32aa069a6e372badcd6efe8a9f20fdc9b5fd8ef1c7be17d95493cb9c5fdef490428d01508709c154f309f76aae1d8fea34c89ea40eedf2f1bdba8b27376740b1fd82d4b4d44181c48a0381338351e888da68866b83287d3e5fd6346cc9e47fdafe23e5f96795953570f38a64af46a8e1c372f41a976bdb0d19ae0af10e60e4e6deff74a58aa7697b0d09cf471c185d72c95f1a74e120dc6ee8d30082ceb4359a047ddfeac9cfded5030270bce2a4de752af996eecbefa53e349e19f1a9b61d75642f6f0a672faf9346198a1ebf60ab596da05f2ec043d7d0116719e75bbc9e916e8ce42a962eacb38177df866b08bc7f08a5ee65048b86950269a052168a01a0f6725a978d1ef29d00ebb3e662e0ef81213a19e52dba05fc19b85a90a12793c78e292e6c4aac5cc80ab4dff29b24848e5ff51ef0c02d2409be51677893dd3ec896a0b763883178bb87e2c27ee3656226249bb4379d0d8e1f70ca756264abf6f2facd148258917fa57fe9fc220688c0f8e2614b911e4a2c218ea808a0aca31d705f43048b460818a796fe17e8a78e876a4f92c81aca7c4dc052051a733dfa38f477ad0beb00b15540863c2f055ec33b05a5df483ffb09f83c0f2def27b67dd46294fba6f72ec4a1b84a8647fd84c2e981e54f32049bad38e1b0d3f96df049a5d72c97dc39c96b8fc852e241cf0b0c35b3097b1918b5d14f36fc000d103d67037e91a938c4982acc85de93fd9765f2afcdac7cbd30a4b3778533d95cfb247c3bf96067d645a376040a6cf713ac8cb090f5fe423cb25c43864ea87907f943a85a31009b946df59e7dfffaaa514062f93f9b11b99830c8af653ecd1325ef1324f0a4c03b26127ec8bb4b7e6f5504836265bcf089beec30706ac4494b865c010b190375e3b1d29aefaf1f3b7612b6be2c8d5248fde703794909c65212155f5fe84074ed1457ac6c4c40d7d3e3489dc51673035d0e089f037dffa526baa8f8f9de9e39398bc8bfd5803f792f89929e6e5f6fa7d589063e62f9c1cb564577566e69b9b88159f4bcbbf51845eb802b05864dbc7f26470cbd5aa5ca789b6375107340a63a20d965e2d884a642497cbcefb50bec2e682887f4a44d690113f895a75d736803ed0b7714604446bdaebdf80c5bcfd59999bf8696997b56257186de6f592b420f72d27cd2d1090717b6880f62f2002762d6ef0098e98c3370699b0c77da64aa260d6c51254fbb3c762a80f988cff2b621eeda2053cc74c4c503d8f0063c2729f3d61ef609989d486579193e21708599790894d481ffcef95d7092eeb693fcf523f300517f44f20481b92490f8b4c21e7510915be4a9fa5bb1a24945ad39cc196dc07180613083237f9f22ecbf81bac7809a852ce709f1b1be21382a3f318bdfcefaea144c467b9168b97e3e2ed4e5d4095b5974bf2909c57a4af5f358ffbf32341c32320d7ebfe650a4ca78d3d3be464c19791950ecd0b0a5703894736d996e811a1f2fa6c955f5a3976bf61a7a47055d531f1002c1a9360791981be8460196f22165f950021943b917b345e97b8ede4b8a9beb22a420300317c3983cd9f57eb90c1fb398c3b60202145732626a7a2246a2caacf5d8b740704f777c1df4fbfc1689b52fc3c9d07f21bc27757cb6dd2d184602c1425d1edbf0ee710281c9dab69a049cf2da106dbee407d1e341afc38816ed9b311a1eba30d1a4df03b42db566eea036b3cabd6535da20f75dc90faf7909e78f5dc0d19b576ccb157efdca9ace4d645c67c7c6a910fd2433eee86bceee28bce1ed9d955031f38acedd8e17256ab11da2f5d10b79d1995d8393c87f62b29f3224d1357b7e550d0b5db362a271e78fc7d228eee11c49e03f02c6f2c2cd41440a205d82a08b115bf90eb25484240f86b757cbcc07e9ef1187bc9d92260270cd493e2353f5dc91df1c8cd3c92a11c8ff24e07ec3b75a62897fd4a35d38c623e6e1940457e62cb7260aba0e8fe5d28e1f4219df0d4a2f74ef2e3773c7ddca9585d6104bb94f2005e0a89a96de9808dc9ffab2e5a25b54369278ede40481f14d9d890525dc5643ee288f0449bdb649f995833eb070d55b205b529e67c3a6d3d745b8c08a703f722a49b320fd99f029935f28dd88e65e2a00d085f946ff735413c6e248de5786b006819012ea72d550e2e1291e51328f99e1fb181bc78240259a7b5279979fcb672b73e2a320cd9498d08310b29601c8aeedf42ff81d351d7a028204f4c922e092da6b186932088ea28c3c2e2e7c940e41f3cada272d974a582d5ae02c06f4d5cd542a178b158d5168369cff7b3ba203dc2d36998550b777705dd2783e416b9477ffd2b2045800f6a7473e06114acdaddbd05e91f0d478d6fb2fe12e522c90a6702706774a2fc9d974ccc6fbcf605dd282d91da3fe84026d7654573be5d589c29b675e56111abdfa00ba49ad3cadf9826856028fb176a437e8809c503024993815cb6fc2deac5ccf92fa60fae8845450bea3e67138adb4771d41e961ea2fd6052a1aff51987b00ca39fe1863d522fec545a41e5373648a466d77c08c5a387fecc07b86ca1bcfe547a7043ab20634450501415c7b407c207d0d92c8126e73779d100ba919aee5d7dfebc766de6cbc8fdbf1900eaf0741adc76ccb491e1bbc01f440357e99a7b534bca5194afdd60d126eb766b1bdab4384f0140768c1c0b0b71068e938945ce803296ef025b4911d2287ee582ee589071ade37eb416e5393fb58cf27c95d445558acd681d738fa2e248a9591beb314dc45dc5a3215f52f13562a6461e59a77b7ae2426657947aaa99cd43514e723097e53742df79bedb1948416499e60cc8e416c86c5f7d2b62f3d6eb8acf4e9a746a68a276528d0814691d37456af5c81080745bd43bd4c9c479c8b3a3bcc93ed359d0d0207d7772d99a17942b36e2322ad311ad43ff2faff4cdb0dcb0d1bce1531ef76c91eecccfb4c8673b72f5af47d78da6c5a105ccb959b54c191ade091a2509e693be3b2a9bfbcc4434fe2832011898a26feaa5df4677f4e4babd63b5d9a5139f56a57207bb48575d8799a2b4954de78d81dc097182b57d27965fe5d1920a182057d3be1052a8dc40dc552597088278195cd6a74197fdaf7a23d4c9a01f08aeb9fb0da2162034feef3e1decfa939c8a23dbe02e7318130c1273247aafb6afb2f3f2e8208eda789164e04d407c6eb8b0a64facb6bfdad388f426fe698206191071867a6a72634d2cfe3eeefb37c33c7007ffef42c14afe19474564d64434b051a64bc11aae92271c15f16a19a12a507f3971dbc5184b3db8333e1a8c5ede4a951790364dc533b23d61313967cdeacb18ebf19c38fd7a58f90d7225b05cc3d2b2d4179abf9ceb5c57169fbacad323a2d6158932a0c167ee2ab9998e3f0e6937613c084767ada5e9fef2b0c175d05796a4671ac6e81d271f8da7ae9bae6a689c10ee5e5b088b9869edf6f8961a766b8068961e13492cf61d71da00f5560f877d9c5490298a392252bdcebe272cb23a9a5cfa"]}]}, 0x1184}, {&(0x7f0000001e00)={0x13c0, 0x3b, 0xb2e, 0x70bd26, 0x25dfdbfe, "", [@generic="cca514123d80197bff574b6e9a3eee98dd01052f74a89709e6691001cdcca310a2143c347bee8c8330ecb02b33e9b218af293cc0ea5842b88cd1c235b77c505584f36485f997d7009827c3605d83efb37827268929ec018802425434bb61442a40", @nested={0x10b4, 0xc, [@generic="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", @generic="16d58d1fcbe1b2643f41fad39814c9999fda3de4c76ae5c3b3e1a6cea0fafa9001d743ed29858b7470032b9a", @generic="c0ad7b3da1a1274d7ed8c7ad4500c0fb1e6b67a2ba9fd32a93732dc8c1c9dc4bd5937c0ebf4278d0d793e47c50cfa2f45d15ab4376124b70afb7ea2146b0054c610534aba0067e87619c839798af4e8a4d8cda3c42646b81b8c1f9e20d1e603f3596b7ca7f951b780edcb5001808f0cf5477bb3ccdde924f79805ad7ac30591436b3673a"]}, @nested={0x7c, 0x85, [@generic="7c9d31b1f3b50f3ebbd4fec1a8350c28910edc52aa7df828deb0d015f7d0be5a109c30a268b6b87019a2b5ab97cb2573017d81f064e3d2262a479603f741086c8d5d865aed2759d798c38d1a887c0fc3ec0281ba3feb66cd759a28cc7121d19b366164135ef98bd06bf666659b7a4d399bf3a9fe4cace9c1"]}, @nested={0x54, 0x82, [@generic="5033974f904be12a91ddaea5544caaf94d6ee9b445150f8e29520332cac28c73fb38bb24a5e7c6d2f8838fb4ff89b18c9a23dd03bbd3cf53a5288f4c36a5d77e9e92fab831da2179", @typed={0x8, 0x3b, @u32}]}, @typed={0x8, 0x35, @fd=r0}, @typed={0x4, 0x4d}, @nested={0x1bc, 0x94, [@generic="59d32632ea55130b2dc1dc25fc1af539bb3dd1d290ee8c2f170f3d7fc83dade2af66b8ccba24a42a664a59d6f9bdcefdf7", @generic="95a82003600df51739a9833c4f572d46d0f1a989e228bd04a04ab7c6081bef149d2fb3d4", @generic="a98c516a15566f760023b802cca119c111ebbe298c1464685069837fa23d08849fa5bcbc1e80fde85f", @generic="dd070e8634af657fb303771dbdedc6c6decbbef4843373188bacb2ad2aae19ae2357c2f1de70af8af658beeb9ccb7388c0cd898467f8edb237180f94e02f568f4d", @typed={0x8, 0x3c, @ipv4=@empty}, @generic, @generic="dacfbc1d2770b79a99b3da88696fc65eb5607c9034ee1cff4588f430fc559ae8c7eccf61d432a3a916f042186ab06aca35f006412eb9ba6faaca830561967a4db7613e7e61bb73ffcbb59e0cec6e4ca6f44947d2c85abd426eccd22c94fabbc21413c79c614c708106fc42d87a1797c05c5116e7ea3225fb0242127491f35ba45b35513e6cd546d6c4135fd8e8e190a23785defbe70d7e4d26d038afd38bfb295e418d26df45857d0b05151a4ac7b10901219520a0f1a7272ff56a5a82e6739ce3ba0952a70cda10e14a084e43ed8fabf605eeb303f2792848537b8acff5f3f95343840d8382292ae202300e020e0624"]}]}, 0x13c0}], 0x4, &(0x7f0000003480)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x38, 0x1, 0x1, [r0, r1, r1, r1, r0, r0, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r1, r0, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xc8, 0x4008894}, 0x8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r14 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x100, 0x0) sendmmsg$alg(r14, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="26619beb80ab6779c430541faebacced3485ba115fca52fde32fb3f7210b64608faa2ba1f2fe39a53cc9af9c7930e5612e8947581107cae9639ae923e101353d2acb019b433f116a752c80cc3bd055da3950dc70cd298d958e573652fa203f9dc07a99c8881d75e18cfe5fe3c94f176aa5bef4fd925ccfbb56d87ccf4e607be845e90f371189edf7eaf46ae3e35de693cf0f8d8e", 0x94}, {&(0x7f00000002c0)="b338aed75184a9", 0x7}, {&(0x7f0000000300)}, {&(0x7f0000000380)="f8545eacc104865a7f512f9b14b1c17fd89245b62b090ca70e200f846a76fadce6cfa877a6f4b2ba6938216788a3a039d1f5c63db02cc6609794f9500983f23a616335a79c5d73525fecfc9c28282af35048294bd092108887930d5898718e4a12d460b29e6d6ed1fa58a1fb99e460862f97e1f9f91968d80d2eaf3fed99b61b22c70fff24f5620209e87c74f2319eac58c972dc8f449b97f9281c0e0ccfde63b99203cefce1d1a2bc762b83b46a48b7a5d75658d561882810dc", 0xba}, {&(0x7f0000000440)="7501278e2a41c4bbe752cb642bfe6cac23822f9718b5b5d8e0536567e09ce0aa58a24496d66e36317ee341bd563ba688014a14f00d71a69494e63a8444111ac3a77e603f2a184d97aa19694dbd514ae14e8ab870a00846240c6e864d959f65cf02c24e7dc347e4fb67dca0ca4de417108f5723260b1dd88c6d7d0e6b5fd3068253d3d9615a8fe2862413f0f6ddafa909b62a57b894da545f3377854df83e821c5501a4befe13dda665efcaddf5e71010eb39d461bdd281732e37903f386da93ee621901ec9f369ba9f70e1ece76f", 0xce}], 0x5, &(0x7f00000005c0)=[@iv={0x48, 0x117, 0x2, 0x2d, "08238bebee6c786b60deb2d375e6c83a6e588f9f3997ca6653eb020dfcd9dde2089bdf09da86d8489d0a51e54f"}], 0x48, 0x14}, {0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000640)="e2dcca7329888660f2e12825f36edf73d7c88b8e16d7c5742ed0bef27e887ccd964d42ca69f1b0b44c61bfd1d11ba1c443f29465718a9c", 0x37}, {&(0x7f0000000680)='x', 0x1}, {&(0x7f0000000700)="60220bd91f4b6aa0184b89ccbfa7a5cefd148a8c5b", 0x15}, {&(0x7f0000000740)="1613d6e681944584f037d565ff4423c30055aa4d7e9ebd77372b01463629011fc768ad140208cdf651606c52f3a31610e24861690ec8915e76979ab20bdd25637122ab17409b58e68df6d67c935234ded5da3703b43fe7b20dfeeaec7952860bc820a30934787525e8a1c9619ff64cdf20f386e507a396800007", 0x7a}], 0x4, &(0x7f0000000800)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xe0, 0x117, 0x2, 0xcc, "6568fc06dafe68361063ba2921afc21e5e73ac83749c47ecb143bb394d77ac8130ea98a43645d5856144064a34f1028d65921cb70ce0a4a92702e04c1a5571e85b543c7ec0b5841e3ea1ad4e361a2076f5b35c4f9a47556946502fbcb3a2bd5d3a6e7649d0b9414165aa5a4d485c3d71ff4a7deec16bc7a676cb907a8ff799613f89f8083546aaae2c8c9b5a7599ea58187246a99cc608972b1883b01ca0b9f4813decbe2a4b33b8751eba979db331d5a57e6cb64b947021727ab6a673aac8c355ebfcec2caf1ce2c2b35d65"}, @op={0x18}, @iv={0xf8, 0x117, 0x2, 0xe1, "6355f72d529e7ee8afa7c353d84ccf0489e1dd2eef2bc1e1c1e6f23454009d68224920b8824e16c78dc8aa71f6e5258f412fbfcebb7149b70ff460e38ec5a3eb195bdca227342340608f11799f134684bc6fad70a8a983c42e678408ecba9e93d78a58d6f44e54aec0e9a4d2ee75d4a3a07f87ebd1b14b8dcb3a87cedc48390610f3a67dbe8d97304c88cde486c9e1b5694b73253872e12f39963a7b06fa44c05c982783a44eb6c5e377c994204dc9bda77648ccba889ef083e96e6a702acb180fdffbbbd87fea7e19e2f26680a55a3caf9b4c7a55f9ebea54ccbd64fce716a35d"}], 0x220, 0x4000000}], 0x2, 0x4) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$PPPIOCGDEBUG(r15, 0x80047441, &(0x7f0000000040)) [ 1392.601202] binder: 952:965 ioctl 40046207 0 returned -16 [ 1392.601240] binder: BINDER_SET_CONTEXT_MGR already set [ 1392.612959] binder: 952:953 unknown command 13724421 [ 1392.618085] binder: 952:953 ioctl c0306201 20000340 returned -22 19:09:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6403, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1392.653096] binder: 966:979 unknown command 1456169733 [ 1392.670999] binder: 966:968 ioctl 40046207 0 returned -16 19:09:08 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0909000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1392.709700] binder: 966:979 ioctl c0306201 20000340 returned -22 [ 1392.727377] binder: 982:984 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1392.732138] binder: 966:968 unknown command 1456169733 [ 1392.750942] binder: 966:968 ioctl c0306201 20000340 returned -22 19:09:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:09:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:08 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0a09000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1392.789782] binder: 982:984 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6700, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:08 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0b09000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1392.922242] binder: BINDER_SET_CONTEXT_MGR already set 19:09:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x7fff, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2000000000000020, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x101000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0xf5, "8c466ca973ce04bf8cfd3c9e1459b247fb1b69913417d977095dd2dff9e5eab771d78e61f8a6548c9f2f12181a1959928f0495f320300a9531e79850ffae8e6cdea6a198c0030ce9e6be48f64ebe1544581188bf904a83b029d32712154672374c56a865f67ea881cc9afd1494c75f546e076184382ff6b41cc7ce28812bacc57e5efd20316c620f1713fbd5aaad386a42f9dc458cd796842ddbb46e0195ede7866672743b483d26b71d9ad67d5c3f0e64f64f308348da0ff624aa1775a2def8baf9b56926831fb8cc8d94de190af1c3bc734ec60370d35bc569a5bc3fd6eccf5ea6fe76d62da0a229a36d543630f047c168cbd963"}, &(0x7f0000000240)=0x119) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563044000000000be5957e658551da153d080a1762b8bf9aaa71966b39f8eeff81f106a7433c0ab4ec64b074b7463161de5d2231b108a1ee0f1aa12b325077b58bdc843aba4d16ff81eeef8209ff43daba4783c2e72d05ac2fcefad11fdddb7541638030972697a4b00e9b704e4116c1022e7ea79936681d24c0a92a516ba5c09398b5a99e15a8b9d70a372d751230f50215ac1d4256c2ab3a74ab73e06621d44841bf95de6c074ae5168d903e3494958460c17b40f93b2054b48d504d5750b8bf0d6bc790c6d23684a40d822c651fc2b75d8175f"], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000140)={0xf, 0x1f, 0x100}) 19:09:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20100, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x100000000, 0xf35e, 0x3, @link_local, 'rose0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ec62044000000000"], 0x0, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x1) [ 1392.971406] binder: 1002:1009 ioctl 40046207 0 returned -16 [ 1392.971416] binder: BINDER_SET_CONTEXT_MGR already set [ 1393.092163] binder: 1003:1008 ioctl 40046207 0 returned -16 [ 1393.095383] binder: 1003:1015 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1393.098409] binder: 1017:1018 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1393.119297] binder: 1025:1029 unknown command 1074029292 19:09:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6800, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1393.150261] binder: 1025:1029 ioctl c0306201 20000340 returned -22 [ 1393.158178] binder: BINDER_SET_CONTEXT_MGR already set [ 1393.189848] binder: 1003:1015 ioctl 40046207 0 returned -16 19:09:09 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0e09000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x540, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x9c, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000000)=""/23, 0x17) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x43, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRESOCT, @ANYRESHEX], 0x0, 0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x80, 0x1, 0x4}}, 0x14) [ 1393.189880] binder: BINDER_SET_CONTEXT_MGR already set [ 1393.207454] binder: 1025:1035 ioctl 40046207 0 returned -16 [ 1393.239460] binder: 1025:1029 unknown command 1074029292 19:09:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048e]}) 19:09:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6c00, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:09 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1393.311187] binder: 1025:1029 ioctl c0306201 20000340 returned -22 [ 1393.312821] binder: 1054:1055 unknown command 196611 19:09:09 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0f09000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1393.365401] binder: 1054:1055 ioctl c0306201 20000340 returned -22 [ 1393.426442] binder: BINDER_SET_CONTEXT_MGR already set 19:09:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6d02, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x7) 19:09:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000300"], 0x0, 0x0, 0x0}) [ 1393.451089] binder: 1069:1072 ioctl 40046207 0 returned -16 19:09:09 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1393.545381] binder: BINDER_SET_CONTEXT_MGR already set 19:09:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048f]}) 19:09:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1393.577289] binder: 1087:1088 unknown command 0 [ 1393.580977] binder: 1079:1085 ioctl 40046207 0 returned -16 [ 1393.601817] binder: 1087:1088 ioctl c0306201 20000340 returned -22 19:09:09 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1109000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6f03, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1393.653336] binder: 1087:1098 unknown command 0 [ 1393.658035] binder: 1087:1098 ioctl c0306201 20000340 returned -22 [ 1393.659731] binder: BINDER_SET_CONTEXT_MGR already set 19:09:09 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000100)={0x20009, 0xfffffffffffff000}) 19:09:09 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1209000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'vxcan1\x00', {0x2, 0x4e24, @broadcast}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1393.720261] binder: 1096:1099 ioctl 40046207 0 returned -16 19:09:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05634b0200000000"], 0x0, 0x0, 0x0}) [ 1393.824497] binder: 1110:1112 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1393.835682] binder: BINDER_SET_CONTEXT_MGR already set [ 1393.853644] binder: 1111:1118 ioctl 40046207 0 returned -16 19:09:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x7003, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:09 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1309000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:09 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r1, r2) r3 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x50, 0x20, &(0x7f0000000400)=[@ptr={0x70742a85, 0x0, &(0x7f0000000380), 0x1, 0x4, 0x2c}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0), 0x1, 0x4, 0x32}], &(0x7f0000000480)=[0x7e59c9266925123d, 0x30, 0x30, 0x48]}, 0x7}}], 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000540)={0x5, 0xfff}, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000040)=0x7fffffff, 0x8) 19:09:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x100000001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x9, 0x1ff}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1393.964911] binder: 1132:1133 unknown command 38494981 [ 1394.016405] binder: 1132:1133 ioctl c0306201 20000340 returned -22 [ 1394.037573] binder: 1139:1140 got reply transaction with no transaction stack 19:09:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x7203, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1394.063046] binder: BINDER_SET_CONTEXT_MGR already set 19:09:09 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a6009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000491]}) [ 1394.087812] binder: 1142:1143 ioctl 40046207 0 returned -16 [ 1394.093832] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.099120] binder: 1132:1144 ioctl 40046207 0 returned -16 [ 1394.100159] binder: 1139:1140 transaction failed 29201/-71, size 80-32 line 2801 [ 1394.115300] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.125849] binder: 1142:1143 ioctl 40046207 0 returned -16 19:09:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="9dcf8d3ad504af7d3d02fa9d13458fe2dba2ac4fdc533b6c5ee139cd6e227cea13e0633c781fbd14b1966700e25bc91e93f122c00f5bbcc967ae1a2f3716827d1e85bd861312a4949e5f6a4e96b339a618bbfa29ebc8170cad80d3f2426804e0a772cd65bf5b7d8c653108dd0aebec88fab8d556d3ed604e40f6aecdc3e0eee6b763c2b0aa359cd17db98994feaeb2ac56d4881bb16c98ac4496bf99f1cf2ab5d66715d092516d60442dbef64801ad807666e4a042c7564b840eba53eddbe1a15eaeac032be85010c164bd8327e6ff16dd1968eb6b6d01a82593ce699f27364b06dfe7d294a27650efde6f10771a72e58a31d973e9"], 0x0, 0x0, 0x0}) 19:09:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x7801, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1394.197281] binder: 1139:1146 got reply transaction with no transaction stack [ 1394.247250] binder: 1159:1164 unknown command 982372253 [ 1394.255608] binder: 1139:1146 transaction failed 29201/-71, size 80-32 line 2801 [ 1394.258060] binder: 1159:1164 ioctl c0306201 20000340 returned -22 19:09:10 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a141165524f4d05d000000000000000000000000000020"], 0x0, 0x0, 0x0}) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x980, @rand_addr="9068decb282e98573796dd8408d1a816", 0x9}, {0xa, 0x4e22, 0x1, @empty, 0x80}, 0x180000000000, [0x0, 0xfffffffffffffff7, 0x4, 0x5, 0x9, 0xcf6, 0x10000, 0xf5]}, 0x5c) socket$nl_route(0x10, 0x3, 0x0) 19:09:10 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0003000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1394.295594] binder: undelivered TRANSACTION_ERROR: 29201 [ 1394.313391] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.318766] binder: 1159:1176 ioctl 40046207 0 returned -16 19:09:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x7803, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1394.343516] binder: undelivered TRANSACTION_ERROR: 29201 [ 1394.349138] binder: 1159:1164 unknown command 982372253 [ 1394.384431] binder: 1159:1164 ioctl c0306201 20000340 returned -22 19:09:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x2000004d0]}) 19:09:10 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fallocate(r0, 0x70, 0x0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563cfafa63e6c0a"], 0x0, 0x0, 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000040)={0x7c53, "fe7d23fb52a649944634bf07ae26848aa309e1ce0d8105707cd88e9375052edb", 0x1, 0x1}) 19:09:10 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0010000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1394.405701] binder: 1178:1184 unknown command 1427521953 [ 1394.415995] binder: 1178:1184 ioctl c0306201 20000340 returned -22 19:09:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1394.494954] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.500363] binder: 1178:1184 ioctl 40046207 0 returned -16 [ 1394.524290] binder: 1189:1196 unknown command -1345363195 [ 1394.548598] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.554043] binder: 1189:1196 ioctl c0306201 20000340 returned -22 [ 1394.573056] binder: 1178:1202 unknown command 1427521953 [ 1394.578531] binder: 1178:1202 ioctl c0306201 20000340 returned -22 [ 1394.586357] binder: 1189:1196 unknown command -1345363195 [ 1394.591986] binder: 1195:1199 ioctl 40046207 0 returned -16 19:09:10 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009020200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1394.618858] binder: 1189:1196 ioctl c0306201 20000340 returned -22 [ 1394.626304] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.631675] binder: 1195:1204 ioctl 40046207 0 returned -16 19:09:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563044000000000049e6bd15fd857c1a07b9b044bf10d7120bb01372d837431cb00"], 0x0, 0x0, 0x0}) [ 1394.662716] binder: 1195:1199 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000560]}) 19:09:10 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009030200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:10 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000700)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304ba5a000000444d6931d157f9d5d378f53d9da8745037742160562baca14ef447ba8d90aa"], 0x0, 0x0, 0x0}) [ 1394.954380] binder: BINDER_SET_CONTEXT_MGR already set [ 1394.959802] binder: 1217:1218 ioctl 40046207 0 returned -16 19:09:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x10000, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x2, 0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x82040, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x7ff, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x43d, 0x8) fcntl$setpipe(r0, 0x407, 0x100) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000200)={{0x7ff, 0x1, 0xc00, 0x3, 0x2, 0x3}, 0xf0a2, 0xffffffffffff0000, 0x4}) [ 1394.998592] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.033035] binder: 1226:1228 ioctl 40046207 0 returned -16 [ 1395.059657] binder: 1226:1233 unknown command -1174117627 [ 1395.067595] binder: 1226:1233 ioctl c0306201 20000340 returned -22 [ 1395.148891] binder: 1226:1228 unknown command -1174117627 [ 1395.169847] binder: 1226:1228 ioctl c0306201 20000340 returned -22 19:09:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() getpgrp(r1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000561]}) 19:09:11 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009040200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x7903, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:11 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009050200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1395.653463] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.658907] binder: 1242:1254 ioctl 40046207 0 returned -16 [ 1395.684265] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.690361] binder: 1241:1257 ioctl 40046207 0 returned -16 [ 1395.696474] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.714345] binder: 1242:1254 ioctl 40046207 0 returned -16 19:09:11 executing program 2: r0 = semget$private(0x0, 0x2, 0x10) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000200)=""/201) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r1, 0xf7c, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2040, 0x8) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000380)={{0x2, 0x4e21, @rand_addr=0x5}, {0x6, @broadcast}, 0x4e, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 'teql0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x80000) write$FUSE_POLL(r0, &(0x7f0000000140)={0x17, 0x0, 0x1, {0x8}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000200)={0x5, 0xa8c, 0x100}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000280)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) read$FUSE(r0, &(0x7f0000000700), 0x1000) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05630440000000df722000fade112f09083cd089bf74dc64bca2cedfd4ffef7af831c21953deda8e0e9ff34c6be9e4cad01325d09fd2f6dc12bd18d507237403e4789591e6988217ebc4e62512b96900fdb8562074b414cd514d773f4e3c81a1febdd4d1b31d51fdf6adc7bb90752a092a1735491bb515fae4179f10e8ce8660eb66d8e882d8d5"], 0x0, 0x0, 0x0}) 19:09:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x20004, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000140)={0x0, 0x200000, 0xde, &(0x7f0000000100)=0xc}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630402000000002261c5bb0a60a300000000414b384c4a53f1e86715408a50f32cf70356dcb229ca07bd192c51e68b01baf86f8af32ede2ef8fb0c9ddab20e1ac443dc8ea34dc8105203f43e73496fec6ade3b7369181d7ef3cba633ccf60d1a625ad19cdc0f4db7b0b2c40ca50800dcbb52290c5affcd200c17d25e97"], 0x0, 0x0, 0x0}) 19:09:11 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009060200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000570]}) [ 1395.873074] IPVS: ftp: loaded support on port[0] = 21 19:09:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4280c0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x3000) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="058f8f67ff0800"], 0x0, 0x0, 0x0}) [ 1395.958346] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.970853] binder: 1265:1283 ioctl 40046207 0 returned -16 [ 1396.045241] binder: 1285:1293 unknown command 1737461509 [ 1396.055720] binder: 1285:1293 ioctl c0306201 20000340 returned -22 [ 1396.107708] binder: BINDER_SET_CONTEXT_MGR already set [ 1396.115361] binder: 1285:1295 ioctl 40046207 0 returned -16 [ 1396.142951] binder: 1285:1293 unknown command 1737461509 [ 1396.164014] binder: 1285:1293 ioctl c0306201 20000340 returned -22 [ 1396.187024] chnl_net:caif_netlink_parms(): no params data found [ 1396.217546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.224107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.231204] device bridge_slave_0 entered promiscuous mode [ 1396.239066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.246485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.253693] device bridge_slave_1 entered promiscuous mode [ 1396.274312] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1396.283159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1396.299695] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1396.307785] team0: Port device team_slave_0 added [ 1396.313193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1396.320226] team0: Port device team_slave_1 added [ 1396.325512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1396.335672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1396.394192] device hsr_slave_0 entered promiscuous mode [ 1396.452859] device hsr_slave_1 entered promiscuous mode [ 1396.495053] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1396.501869] device bridge_slave_1 left promiscuous mode [ 1396.507902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.553318] device bridge_slave_0 left promiscuous mode [ 1396.558749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.688641] device hsr_slave_1 left promiscuous mode [ 1396.747818] device hsr_slave_0 left promiscuous mode [ 1396.807451] team0 (unregistering): Port device team_slave_1 removed [ 1396.817628] team0 (unregistering): Port device team_slave_0 removed [ 1396.827694] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1396.889669] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1396.973423] bond0 (unregistering): Released all slaves [ 1397.087064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1397.100071] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1397.127309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.136243] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1397.144828] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1397.150938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1397.158172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1397.167943] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1397.174323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.181914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1397.189030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1397.196914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1397.205060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.211386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.218343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1397.228915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1397.236098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1397.236490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1397.251312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.257666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.268859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1397.276176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1397.286116] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1397.295450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1397.304771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1397.313972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1397.321022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1397.329045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1397.336649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1397.344666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1397.352187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1397.361588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1397.370660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1397.378441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1397.387727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1397.396713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1397.406810] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1397.413235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1397.420083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1397.427802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1397.438475] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1397.451745] 8021q: adding VLAN 0 to HW filter on device batadv0 19:09:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x8801, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:13 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009080200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 19:09:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000571]}) 19:09:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00100d0000000000f5d2278bdf9c9a1e248781cf8ba5742ccab688722c962a27783abd722819bb199341651caf8631e161cfc8ca61a268127a2e14aa054b233c5f4eb68358a46185761bbe148d9efc6e4abba63f10d422f328eefa31efb4cfbe2394b72bb972c56b61d389d043656041885769078fa9876b89bb1d27c68709b9a79581e1f5"], 0x0, 0x0, 0x0}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) [ 1397.493634] __nla_parse: 62 callbacks suppressed [ 1397.493639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1397.572752] binder: BINDER_SET_CONTEXT_MGR already set [ 1397.578107] binder: 1310:1315 ioctl 40046207 0 returned -16 [ 1397.589041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1397.604541] binder: 1307:1318 unknown command 856064 [ 1397.616408] binder: 1307:1318 ioctl c0306201 20000340 returned -22 19:09:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x3e9, 0x0, &(0x7f00000000c0), 0xf8d585139b90bcb6, 0x0, 0x0}) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x4000) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x40) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) [ 1397.626386] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. [ 1397.646114] binder: BINDER_SET_CONTEXT_MGR already set [ 1397.659331] binder: 1307:1322 ioctl 40046207 0 returned -16 [ 1397.669965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1397.675574] binder: 1307:1318 unknown command 856064 [ 1397.708029] binder: 1307:1318 ioctl c0306201 20000340 returned -22 19:09:13 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'ip6_vti0\x00', 0x3}) [ 1397.741817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1397.781252] binder: 1325:1328 unknown command 0 [ 1397.789649] binder: 1325:1328 ioctl c0306201 20000080 returned -22 19:09:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:13 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009090200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1397.845487] binder: 1325:1328 unknown command 1986356271 19:09:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000572]}) [ 1397.901144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1397.910691] binder: BINDER_SET_CONTEXT_MGR already set [ 1397.943289] binder: 1325:1328 ioctl c0306201 20000080 returned -22 [ 1397.955415] binder: 1338:1341 ioctl 40046207 0 returned -16 [ 1397.955448] binder: BINDER_SET_CONTEXT_MGR already set [ 1397.987248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1398.000355] binder: 1335:1336 ioctl 40046207 0 returned -16 19:09:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x9e00, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:13 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80800) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304400000000026b93fd7fe2465b992ee960927a0267712f83a6def8ea41f356bed32f812c79c28a1473b6446b5cf2bda239a8bbb792305e4dc003989572d0f44b8bc049669742a56a2b45fe33019f06d74095af805c93106d9bd80ea42"], 0x0, 0x0, 0x0}) [ 1398.030376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. [ 1398.038388] binder_thread_write: 6 callbacks suppressed [ 1398.038400] binder: 1335:1344 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1398.112917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000580]}) 19:09:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000140)=0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x80000000) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000000c0)=0x100000000, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) connect$netlink(r1, &(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) [ 1398.208852] binder: BINDER_SET_CONTEXT_MGR already set [ 1398.244193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:14 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a00090a0200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:14 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x100000000, 0x1, 0x3}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x9, 0x3, 0xd2b}, 0x10) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) dup(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1398.261126] binder: 1354:1357 ioctl 40046207 0 returned -16 19:09:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0555044000000000ae468a44bbf961affbe91fe9f41c472e699a08d14eb1ef3bebf7afcc739e9f9e342952345b5a545e0bb27c49b9f74db7da660cc04eb0e5b35a430e"], 0x0, 0x0, 0x0}) [ 1398.343525] binder: 1368:1370 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:14 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a00090b0200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x400, 0x200200) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000200)={0x1, 0x1, {0x20, 0x1b, 0xc, 0x8, 0x4, 0x7252, 0x1, 0xb1, 0xffffffffffffffff}}) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000240)={0xa90, &(0x7f0000000700)="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"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x81, "69e564455926717ef2c1071e468122b4c550c387767de49ea613c7544f150cd80d50d77effe0bbed3c38cf3384feb393948b1d6b00169962dbc007e83ea850a4f0473e9bfdedce37da82a806587a7b8813c2262815873044c81109c07ed0b08c82834e88166bf579b13f38cb2d73f3b9fa1072f68be97b8523a64653869abd0ee1"}, &(0x7f00000000c0)=0x89) bind$x25(r1, &(0x7f0000000280)={0x9, @null=' \x00'}, 0x12) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0x9}, 0x8) r3 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x23c, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xa000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1398.471370] binder: 1387:1389 unknown command 1074025733 19:09:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mkdir(0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', 'upperdir'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f0000000080)=[@register_looper, @request_death={0x400c630e, 0x4, 0x2}, @dead_binder_done={0x40086310, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000000)=[@fda={0x66646185, 0x8, 0x0, 0x37}, @fda={0x66646185, 0x3, 0x1, 0x9}], &(0x7f0000000040)=[0x20, 0x40]}}, @acquire={0x40046305, 0x4}], 0xa5, 0x0, &(0x7f0000000200)="7084c0e3cca96a57678a751f309d717cebb6005a1d7955c588c8552f4bba051659b245a7fbac225e6abcf33d8e25da44a78c08f41122b80afc00a53be41509c7c0d7baeef4e89a54a89e670f5e4613ce125e94209957b6b9deec68fa2e51da0b7926baaa94862c29c0d9a6ebacb0ab7b102cc9182bdd96706efc8e7dd960b3787d3f3db5460b2fcf3c0f8928a177717f4f29619be8a1bb0d9346446027d01c2e951d33d382"}) 19:09:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000587]}) [ 1398.513043] binder: 1387:1389 ioctl c0306201 20000340 returned -22 [ 1398.547476] binder: 1393:1394 unknown command 0 [ 1398.570735] binder: BINDER_SET_CONTEXT_MGR already set 19:09:14 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a00090e0200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1398.594487] binder: 1393:1394 ioctl c0306201 20000340 returned -22 [ 1398.597198] binder: 1387:1399 ioctl 40046207 0 returned -16 [ 1398.637740] binder: 1387:1389 unknown command 1074025733 [ 1398.643699] binder: BINDER_SET_CONTEXT_MGR already set [ 1398.674644] binder: 1401:1405 ioctl 40046207 0 returned -16 [ 1398.684733] binder: 1387:1389 ioctl c0306201 20000340 returned -22 19:09:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xa002, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x400000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x2, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'\x00', 0x200}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x1, @bcast, @bpq0='bpq0\x00', 0x80000001, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x660, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304097507c47934adce47e276e428685f4000000040"], 0x0, 0x0, 0x0}) shmget(0x0, 0x2000, 0x101, &(0x7f0000ffe000/0x2000)=nil) [ 1398.717880] binder: 1401:1411 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x3, 0x1}, {0x4}, 0x8000000800, 0x1, 0xfffffffffffffff8}) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056b044000000000"], 0x0, 0x0, 0x0}) [ 1398.801477] binder: 1401:1405 ERROR: BC_REGISTER_LOOPER called without request [ 1398.845250] Unknown ioctl 35083 [ 1398.856834] binder: 1420:1423 unknown command 151282437 [ 1398.868745] binder: 1401:1405 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 1398.878378] binder: 1420:1423 ioctl c0306201 20000340 returned -22 19:09:14 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a00090f0200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1398.895726] binder: 1421:1425 unknown command 1074031365 [ 1398.896314] binder: BINDER_SET_CONTEXT_MGR already set [ 1398.912802] binder: 1401:1405 BC_DEAD_BINDER_DONE 0000000000000002 not found 19:09:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xa400, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000d90]}) [ 1398.938301] binder: 1420:1426 ioctl 40046207 0 returned -16 [ 1398.939008] binder: 1421:1425 ioctl c0306201 20000340 returned -22 [ 1398.945019] binder_alloc: 1420: binder_alloc_buf, no vma [ 1398.975952] Unknown ioctl 35083 [ 1398.995133] binder: 1421:1435 unknown command 1074031365 [ 1399.009433] binder: 1420:1423 unknown command 151282437 [ 1399.020749] binder: 1421:1435 ioctl c0306201 20000340 returned -22 [ 1399.023563] binder: 1401:1405 transaction failed 29189/-3, size 64-16 line 3035 19:09:14 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009100200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1399.042369] binder: 1420:1423 ioctl c0306201 20000340 returned -22 19:09:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r0, 0xae9a) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff, 0x2080) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, r2, 0x1}], 0x0, 0x0, 0x0}) [ 1399.078237] overlayfs: filesystem on './file0' not supported as upperdir 19:09:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000300)}) r2 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={r3, 0x58, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x7fffffff, @loopback, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x29}, 0x3ff}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000280)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1399.168928] binder: 1401:1405 ERROR: BC_REGISTER_LOOPER called without request [ 1399.203325] binder: 1401:1405 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 1399.218086] binder: 1454:1457 ioctl ae9a 0 returned -22 [ 1399.233883] binder: 1401:1405 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 1399.245935] binder: 1454:1457 BC_INCREFS_DONE u0000000000000000 node 450 cookie mismatch 0000000000000001 != 0000000000000000 [ 1399.296366] binder: 1459:1462 unknown command 1050700243 [ 1399.309682] binder: 1454:1457 ioctl ae9a 0 returned -22 [ 1399.319217] binder: 1459:1462 ioctl c0306201 20000340 returned -22 [ 1399.326375] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.331797] binder: 1454:1464 ioctl 40046207 0 returned -16 [ 1399.338863] binder_alloc: 1454: binder_alloc_buf, no vma [ 1399.344861] binder: 1454:1463 BC_INCREFS_DONE u0000000000000000 no match [ 1399.359536] binder: 1401:1405 transaction failed 29189/-3, size 64-16 line 3035 19:09:15 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x200043) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01634040400000000000000000000000000000000000000001000000000000000000000020000000000000003000000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="8561646600000000050000000000000003000000000000002200000000000000"], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00']], 0x46, 0x0, &(0x7f0000000440)="91524a4eb8989e1c4eb2640761883fbff28e3d6dfa94be722eac632cad1ae112c6bc4f5398a78cc0d09954d0daf0fa50b96a719eb718cc8e4f1899d5d776d91eed168a68c99d"}) fcntl$setstatus(r0, 0x4, 0x40c00) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000100)=0x8) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000002c0)={r3, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e24, 0x1f0, @remote, 0x2}}}, &(0x7f0000000140)=0x84) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0xfffffffffffffe22, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000040)={0x2, 0x14, [0x5, 0xfffffffffffffff8, 0x2, 0x80, 0x8]}) 19:09:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xaa03, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1399.393261] binder: 1459:1462 unknown command 1050700243 [ 1399.398873] binder: 1459:1462 ioctl c0306201 20000340 returned -22 19:09:15 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009110200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:15 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000012}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000da0]}) [ 1399.492999] binder: BINDER_SET_CONTEXT_MGR already set 19:09:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0562044000000000"], 0x0, 0x0, 0x0}) [ 1399.523895] binder: 1468:1475 ioctl 40046207 0 returned -16 19:09:15 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009120200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xb601, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1399.616074] binder: 1486:1487 unknown command 1074029061 [ 1399.621719] binder: 1486:1487 ioctl c0306201 20000340 returned -22 19:09:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x2c0000080]}) [ 1399.746125] binder: 1486:1501 unknown command 1074029061 [ 1399.770237] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.774440] binder: 1486:1501 ioctl c0306201 20000340 returned -22 19:09:15 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009130200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1399.818230] binder: 1496:1505 ioctl 40046207 0 returned -16 [ 1399.818297] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.832772] binder: 1497:1506 ioctl 40046207 0 returned -16 [ 1399.869554] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.891619] binder: 1496:1512 ioctl 40046207 0 returned -16 [ 1399.933919] binder: 1496:1518 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e262044010000000ae5178df6ee34c601d9cbc137d186d19a3db56a6262336a7329637223f"], 0x0, 0x0, 0x0}) 19:09:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@generic={0x0, "96b114e97733c8dcf248a59cce4d751aaf9b0b866fedd56a910829d3edb7403c39e28efe5eadb6dbe78e7dac91a6b824b6db31fd8cab5453866fbbf2fd57030a7c18e73bfbdaecd358b9973a5677e234bbe0ba0fb29f56aad4cae9f52e9752187c6aceb10f584e8d18f22210cfc4d736cc0534783ef68cec7ccdbdf5fa92"}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="d7adae58336502dd4454ed66f2e730e2c550417993d00af6c80ca2d4e960d95643e1f4290fec3bc8dc04e0e8b202517473cff959066a288a716339f7ccd610ec73eb710826ff74ebba9320e9c1593aec9b21d575f93c1b6910d33ce84738170b73874bd0723afa448a5b50975e9c7a66e4cd7db5942d621a99ee86ce2efd85c67d9ab76c95d8b73e736aff604977bcae2bd5434774b3a8311063638f80f1677d5996ae1c7730c5e6c644fdaf92c9fa31106cca1dd78f7e5e088c3560abeb1874d5a15bcd1699d0bb", 0xc8}, {&(0x7f0000000380)="81b77112203f3b6930afc241bc807cf7e157e8a0f4db7b00d6511992a173792cf482fe9523760c3dfeabe803f2cff3dfcaa0b59fac4aefb6fa755db775c268c3afc1d1325da906a7b50cb318d1f212d41f11aadd890fe297686ab1a18ea07870287b7f8ffe01112104095db92e9cf747bbd94ce5adcbe5d501cdff28e8484eb09c63675a44ec0d5387bc332a52f3edd8581823ee9e130f7210cce34a99f8c2614ccd223742689af7d7b935f434cd4e3d80ff4ae1d2", 0xb5}, {&(0x7f0000000440)="0eafc85ec84696c70e49aec8363c95a6c76e72d7139024657c2908548d3cfdcc75a72a7026c34593747375bf24e8e66ab446a39e6fad2f8d38c24e18d6a3280ce12f044a6e52fe4e360c6d302a6952f4704cc74276921092db176886fb9873034523f867de8bcef21190f3f42763c9506a675942658e2ab9692e648c948223c319e63a66b08375ab03807be69d39f5440a80e419a9731a6cce2bd9b96d5883f27a0dc64b52276af509dbf164ec3cae39423c349a96bd38ca88a4e54d400d595fae1dfc80c9fe61ce7d88de815debc171c27d9abd1ee2db4c80cb092f31f19a6686ecbf106ea7e153ca4048", 0xeb}, {&(0x7f0000000100)}, {&(0x7f0000000140)="e1d6da12a59a", 0x6}], 0x5, &(0x7f00000005c0)=[{0xe8, 0x0, 0x100, "39ae36f08351bf55a17c35f278d752d02c808e94e5599b3c22ae9ecdc7e35e92a7b10d26d664f5efaf1273c5b2c39481f9002edaac8a8133ac34b7dcee41e829cbfdc6ecd43cb4fda321dea00f921ee35dd9cc7c349133adc521bf89480306b5e19170db53d317b1d1dcba78f8cb297742ef5d7203f8714ebe11e5c89a2d4009a98cda4b3328969d004c419aa865996f3db9d657ef99f0bc3f94c35ba3509f2c59299b233f3df9f9a9c1b3a13c4f82cbcf1f4c4cf27be640683c848a5bced50e10e92d4c863a09c34c4a580b9621ee4fbd"}, {0xb8, 0x100, 0x1, "bce72035107f87a68a0d51fd66d937984f733a059003817c0164751dd2159686bcf3b883657a8a15c312ca3ba57a8c4461ce647c239ac8806a0f3d68ff8b3a777e03f1a1bf9b1edc1cf1fc3f9d874976355b00f135517f800a264ac40208ff222340a9fc5c8c445a4cfcfde3cdeacea30b7011e375b577097dc636b60e37d98e2f8d686d5b657a25e7152afdc770436be92dfb201796da460e9ae4a86153ae9d5162"}], 0x1a0}, 0x4044800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044000040000"], 0x0, 0x0, 0x0}) 19:09:15 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009600200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x2c0000100]}) 19:09:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7, 0x67, 0xe9ed}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc201, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1400.089408] binder: 1531:1535 Acquire 1 refcount change on invalid ref 1024 ret -22 [ 1400.160148] binder: BINDER_SET_CONTEXT_MGR already set [ 1400.169498] binder: 1543:1547 unknown command 1074029282 19:09:16 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000300021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:16 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563044000b28bc539916cad07d799a32e0d00ecff37c49c9a4bfe39c60d2e719ef2d4eb6d8befe2e6a3490ab8a6ece49e346338ca52c420c3590e33050f22e5c78be710643e46fcd171c568e1acea19c5c4c192ac3dcc39df849af374b5e70a6bbf5c2a135d398558b76e7685dc56d90a0ec4cfc8f927531922b3559d67f8177bb3d3ebf37fcae44621fb96fef2eebec6ea4dac39fb9daebfa2766b5de7fb2c718e21b0fc221a1160dc33d34b4a6f5078f15c88290417830e0127dba5f8a3765ef04792aacf640fb4ae64adf90117f60bb0b30f80a865bb3e87e508b9cc6fc639ea1ee239b0115ab3be48e86de5fed99710662263"], 0x0, 0x0, 0x0}) [ 1400.210134] binder: 1544:1553 ioctl 40046207 0 returned -16 [ 1400.210531] binder: 1543:1547 ioctl c0306201 20000340 returned -22 [ 1400.252745] binder: 1544:1558 ioctl c0185879 20000000 returned -22 [ 1400.278820] binder: BINDER_SET_CONTEXT_MGR already set 19:09:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x2c0000101]}) [ 1400.303834] binder: 1543:1573 unknown command 1074029282 [ 1400.313688] binder: 1544:1558 ioctl 40046207 0 returned -16 [ 1400.322323] binder: BINDER_SET_CONTEXT_MGR already set [ 1400.324915] netlink: 'syz-executor5': attribute type 3 has an invalid length. 19:09:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc401, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1400.352240] binder: 1544:1553 ioctl c0185879 20000000 returned -22 [ 1400.364158] binder: 1575:1577 Acquire 1 refcount change on invalid ref -980700672 ret -22 [ 1400.390777] binder: 1543:1547 ioctl 40046207 0 returned -16 19:09:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x10000, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x4, 0x1ff, 0x3, 0x5, 0x3}) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000100)={'veth0\x00', {0x2, 0x4e21, @broadcast}}) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x400) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xbcf, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2563f34000002000"], 0x0, 0x0, 0x0}) [ 1400.420027] binder: 1575:1582 Acquire 1 refcount change on invalid ref -980700672 ret -22 [ 1400.432432] binder: 1543:1573 ioctl c0306201 20000340 returned -22 19:09:16 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000500021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:16 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x23df}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0501800000000000ee262cb41c955fb02b1a3b73ec09a8f4f4c31b5497a6dcf88f7628f7b9a982b95f69b8bfafed887cdd6c8df10eb05c338b4f1a599a0cf16feb192e6c60db466105b0e7443f0c28fa85975cc2f9dd097d5fde47fc"], 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="48e4d5ad6bf0", @random="065aa88bff3c", [{[], {0x8100, 0xdd, 0x9}}], {@mpls_mc={0x8848, {[{0x23, 0xfff, 0x2db5, 0x6}, {0xffffffffffffffc9, 0x10000, 0x8, 0x7fff}, {0x2, 0xfffffffffffff001, 0x8, 0x1}, {0x401, 0x1, 0x2, 0x8000}, {0x3, 0x8, 0x5, 0x9}, {0x3, 0x0, 0x1000}, {0x101, 0x6, 0x0, 0x7}]}}}}, &(0x7f0000000040)={0x1, 0x1, [0xbc3, 0x6ea, 0xea5, 0x27c]}) 19:09:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc601, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x2c0000102]}) [ 1400.558880] binder: 1590:1591 unknown command 1089692453 [ 1400.579947] netlink: 'syz-executor5': attribute type 5 has an invalid length. [ 1400.587537] binder: 1590:1591 ioctl c0306201 20000340 returned -22 [ 1400.628966] binder: BINDER_SET_CONTEXT_MGR already set 19:09:16 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, r1, 0x1}, @register_looper], 0x1, 0x0, &(0x7f0000000080)="db"}) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) socket$inet6(0xa, 0x806, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1400.658519] binder: 1590:1599 ioctl 40046207 0 returned -16 19:09:16 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000300021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1400.711751] binder: BINDER_SET_CONTEXT_MGR already set [ 1400.720558] binder: 1590:1591 unknown command 1089692453 [ 1400.748411] binder: 1590:1591 ioctl c0306201 20000340 returned -22 [ 1400.770009] binder: 1603:1613 unknown command 8388869 [ 1400.792999] binder: 1603:1604 ioctl 40046207 0 returned -16 [ 1400.798875] binder: 1609:1616 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1400.802373] binder: 1603:1613 ioctl c0306201 20000340 returned -22 [ 1400.857968] netlink: 'syz-executor5': attribute type 3 has an invalid length. 19:09:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc702, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0), 0xfffffca9, 0x0, 0x0}) [ 1400.899295] binder: 1603:1613 unknown command 8388869 19:09:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x2c0000103]}) [ 1400.945729] binder: 1603:1613 ioctl c0306201 20000340 returned -22 [ 1400.958503] binder: 1609:1610 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:16 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000400021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x185000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x2, 0xfff}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x2, @empty, 0x8001}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="b05a077403cc72bcca064cff9fe061dc681513cc25de3464d4a5e7fdce56bf99e5c47dd2a19ae25b4e2046c031160f3fd82bbd5250747f133e857a445f581029db3036a65f0b51a3b95a036d7a748f790350939e61157d73ea3e67da190d8d7f6713802a141f3c10dacd7d3b73e443103276b6478b735dd1f83391bcb5aa30877abe6dd418894a1ba91afddaf3fbda79d81df4d8fa19b548320e687cbd9ba992", 0xa0}], 0x1, &(0x7f0000000380)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x1, 0xfff, 0x80, r4}}, @init={0x18, 0x84, 0x0, {0x0, 0x0, 0xf97, 0x4}}, @init={0x18, 0x84, 0x0, {0x1000, 0x1, 0x100, 0x200}}, @init={0x18, 0x84, 0x0, {0x9, 0x4, 0x7, 0xfff}}, @init={0x18, 0x84, 0x0, {0x3, 0x1000, 0x8000, 0xd5f3}}], 0x80, 0x40}, 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x13f, 0x17a, 0x4, 0x8}, 0x10) sendfile(r0, r0, &(0x7f0000000000), 0x7123) [ 1401.077909] binder: 1629:1633 ioctl c0306201 20000340 returned -14 19:09:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xce00, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1401.121835] binder: BINDER_SET_CONTEXT_MGR already set [ 1401.131479] binder: 1629:1647 ioctl 40046207 0 returned -16 [ 1401.139648] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 1401.182756] binder: 1629:1633 ioctl c0306201 20000340 returned -14 [ 1401.208164] binder: BINDER_SET_CONTEXT_MGR already set 19:09:17 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000500021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1401.290386] binder: 1649:1655 ioctl 40046207 0 returned -16 19:09:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1401.333782] binder: 1649:1662 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x2]}) 19:09:17 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5071aa42be66a1729e8b7b190da7393e", 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xd301, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1401.454658] netlink: 'syz-executor5': attribute type 5 has an invalid length. [ 1401.492461] binder: BINDER_SET_CONTEXT_MGR already set 19:09:17 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000202021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1401.532941] binder: 1672:1681 ioctl 40046207 0 returned -16 19:09:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10001, 0x80) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x80, 0x800) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, r2}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:17 executing program 2: syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x103, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc004) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000003c0)={0x2ce8, 0x0, 0x2, 0x5}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000300)=@v3={0x3000000, [{0xaf6a, 0xfffffffffffffff7}, {0x6, 0x9}], r3}, 0x18, 0x2) 19:09:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x4]}) 19:09:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(0x0, 0x4, 0x420040) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:17 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000203021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1401.739163] binder: BINDER_SET_CONTEXT_MGR already set [ 1401.771657] binder: 1696:1703 ioctl 40046207 0 returned -16 19:09:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xd402, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:17 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80000, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000000)=[@fda={0x66646185, 0x6, 0x3, 0x2}, @fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f0000000040)=[0x78, 0x18, 0x48, 0x0]}}], 0x1bfbaa6d591cea4, 0x0, 0x0}) [ 1401.854573] binder: 1710:1718 ioctl 40086602 20000080 returned -22 [ 1401.878911] binder: 1710:1718 ioctl 40086602 20000080 returned -22 19:09:17 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000204021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0xffffffffffffff73, 0x0, 0x0}) [ 1401.925597] binder: BINDER_SET_CONTEXT_MGR already set [ 1401.963096] binder: 1710:1712 ioctl 40046207 0 returned -16 [ 1401.995461] binder: BINDER_SET_CONTEXT_MGR already set 19:09:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x8]}) [ 1402.020410] binder: 1724:1729 got transaction to invalid handle [ 1402.046897] binder: 1727:1728 ioctl 40046207 0 returned -16 [ 1402.057885] binder: 1724:1729 transaction failed 29201/-22, size 56-32 line 2896 19:09:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'nlmon0\x00', {0x2, 0x4e21, @broadcast}}) r2 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={"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"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000100)='/dev/binder#\x00'}, 0x30) ptrace$cont(0x1f, r3, 0xfffffffffffff582, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40106309, r2}], 0x0, 0x0, 0x0}) [ 1402.083282] binder: 1727:1733 ioctl c0306201 20000340 returned -14 [ 1402.103166] binder: 1724:1729 ioctl c0306201 20000100 returned -14 19:09:18 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000205021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1402.133164] binder: undelivered TRANSACTION_ERROR: 29201 [ 1402.139272] binder: 1724:1737 got transaction to invalid handle 19:09:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x404000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)) [ 1402.181233] binder: 1724:1737 transaction failed 29201/-22, size 56-32 line 2896 [ 1402.192875] binder: 1724:1737 ioctl c0306201 20000100 returned -14 19:09:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xd801, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1402.229867] binder: 1741:1747 BC_ACQUIRE_DONE u0000000000000000 no match [ 1402.266913] binder: undelivered TRANSACTION_ERROR: 29201 19:09:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x10]}) [ 1402.290321] binder: 1741:1747 BC_ACQUIRE_DONE u0000000000000000 no match [ 1402.323547] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.353479] binder: 1752:1756 ioctl 40046207 0 returned -16 19:09:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xffffffffffffffe3, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 19:09:18 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000206021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r1, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x44) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000005c0)={0x3, 0x9, @value=0x3}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000000c0)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000540)={r2, &(0x7f0000000500)=""/51}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xfffffffffffffd8a, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630418b7a7ea4c"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') fadvise64(r1, 0x0, 0xb6a7, 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r4, 0x311, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x10) write$P9_RRENAMEAT(r3, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) [ 1402.505878] __nla_parse: 65 callbacks suppressed [ 1402.505886] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1402.522332] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.528265] binder: 1775:1777 ioctl 40046207 0 returned -16 [ 1402.536630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x11]}) 19:09:18 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000208021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1f, 0x2, 0x8, "52d4b8771301a16d28fa16aa954bc3dd45dec8747a8c94ab7968d4240943a5908f7e0d80140ceaeae017c96e9ead59b27ba9f8b4295b89f4cb7ef5af49097960", "83e147736c2de8fcfe534ab66dde731cfb7053d52b4045cee40e84e0161459122ab9fef43bd3411ed2050931fcbbaee304bb3263f77c0d7e42437ee20e074ac3", "b4a07ce5693bdfcbc6cde72a965fce996d9d5d951ad45cfbe1b9e07ba2a0767a", [0x5]}) 19:09:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xd803, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000140)=[{&(0x7f0000000200)="0b393a102005899e08a8bb65cbeac820e54f6f90178acc85a22a217749f9feaeb5511c63e33d5b24cbe377119810ad6b3d72b69640974d27dee317d0da14786de31848f275ddeeffef9705f5a293209af3458685f50d0cf549a802", 0x5b, 0x1327}], 0x2000000, &(0x7f0000000280)={[{@codepage={'codepage', 0x3d, 'cp863'}}], [{@smackfsfloor={'smackfsfloor'}}]}) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=':system\x00', 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x20000200) [ 1402.698425] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.732428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1402.756094] binder: 1792:1798 unknown command -169712891 [ 1402.762167] binder: 1782:1791 ioctl 40046207 0 returned -16 [ 1402.786216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1402.800383] binder: 1792:1798 ioctl c0306201 20000340 returned -22 [ 1402.803973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1402.814467] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.820564] binder: 1792:1806 ioctl 40046207 0 returned -16 19:09:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xdc02, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:18 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000209021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, r1, 0x4}], 0x0, 0x0, 0x0}) [ 1402.861046] hfs: can't find a HFS filesystem on dev loop3 [ 1402.865432] binder: 1792:1798 unknown command -169712891 [ 1402.872440] binder: 1792:1798 ioctl c0306201 20000340 returned -22 19:09:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r2) r3 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x4802) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000080)={0x1, 0x1, 'client1\x00', 0x5, "55b79ffc74356556", "3c06e07a293c86d069fea52141739414a0a4d95fd3567416af9c4f020ea4e991", 0x0, 0x1b4}) 19:09:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x12]}) [ 1402.985761] hfs: can't find a HFS filesystem on dev loop3 [ 1403.005771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1403.056825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1403.083943] binder: 1822:1836 BC_ACQUIRE_DONE u0000000000000000 node 485 cookie mismatch 0000000000000004 != 0000000000000000 19:09:19 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a000900020a021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1403.132395] binder: BINDER_SET_CONTEXT_MGR already set [ 1403.135170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1403.151011] binder: 1832:1839 ioctl 40046207 0 returned -16 19:09:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) chroot(&(0x7f0000000140)='./file0\x00') [ 1403.202461] binder: BINDER_SET_CONTEXT_MGR already set [ 1403.223192] binder: 1822:1836 ioctl 40046207 0 returned -16 [ 1403.243792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xde01, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05bb9e9de125d2abfd26e96e4000000000"], 0x0, 0x0, 0x0}) [ 1403.269928] binder: 1822:1849 BC_ACQUIRE_DONE u0000000000000000 no match 19:09:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x17]}) [ 1403.301974] binder_thread_write: 5 callbacks suppressed [ 1403.301985] binder: 1848:1852 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1403.322645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1403.369595] binder: 1848:1860 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1403.377293] binder: 1854:1858 unknown command -1650541819 [ 1403.377312] binder: 1854:1858 ioctl c0306201 20000340 returned -22 [ 1403.380804] binder: BINDER_SET_CONTEXT_MGR already set 19:09:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x25, 0x3e8, 0x0, 0x400000020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000006c0)='/dev/dmmidi#\x00', 0x3, 0x20040) r1 = syz_open_dev$binder(&(0x7f00000018c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pwrite64(r1, &(0x7f0000001880)="9931753c77f00cf233fe994142021fe9f8aac358f101eb84243edf4096bdc95e3d55cee78459598558ba2be2c36ca66e00620d1d39cb", 0x36, 0x0) modify_ldt$write2(0x11, &(0x7f0000001840)={0x10a, 0x20000800, 0xffffffffffffffff, 0x7fffffff, 0x2, 0x1, 0x3ff, 0x0, 0x0, 0x7fffffff}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xfffffffffffffd0a, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="05630440000000002feceaf39a4fc84783b416702d836ac826c953390ec8467cd358f920211bbe5c4647ef6c6bb44081252cee5aff0ce6bd7a985aa9789abdcb15b3c557dda3ce000000000000cdd303612ec4c53b3771f00617ffac8a6721d5f8ec33570c29c829a81b961ad7ec2b3aeaecad5cf853b8cde02eb2308a21cbb19c419f579368f977d54da8dcfd86b9f25f6861b17c10ff32001dd5941359625894c89f384f1ff0e602e741e5d90ce37bfeca7ee9604678a1e2b2ceddd2fa50304a858c7fe1add58b"], 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa, &(0x7f0000001700)=[{&(0x7f0000000700)="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", 0x1000, 0x1}, {&(0x7f0000000080)="9ff54f503c82516703aef3c4fa7c78fcb30455821fc81848770f460af169b0abda9db810d4f535f23eca41babee7cf84f3888823be10f2048a12608f80f29b679fc960c8a94de1d2f1edabe0ea6c8ec12d256a344da3a6b3d76dd4d2a3da2281615fbcabdbcfe3b51b9ee81c377ac8b6dd76a909d3c8fd5efcba80e4fe", 0x7d, 0x8}, {&(0x7f0000000100)="3003854c3f430e86cce8c2e115567daacbe900f290bfb8eef540e306b2901ed399c44cb0833c9762735054", 0x2b, 0x2}, {&(0x7f0000000200)="ee876f0dc40312a1d193232718cbd2d050dc875943704644553097088c530c1d23cfe7c164f7257a19aa93bbe1e9fcffb581cb43f973d9f8209fb83fbab24eb032", 0x41, 0x3}, {&(0x7f0000000280)="a149b913ee6e3aae61d04e5bee57d645bf4c1f83c9dea2d6da623fc573a1ce3a55461d107039c3474f09c23aacec60745cc2aba2f1f127daaa7068c32785e199f58d2f48a06ebfaef777e838a160520f6a999542e2aceb5b88a48c934a44d20b2b54bbaeb3552cd4b76ab0ac449199aff12dd363b9937d06c47028cc677484a53a2e9d4a17", 0x85, 0x80000001}, {&(0x7f0000000380)="0e953f2d6acd2d9f16cedc32eca067bac6d9997c52647674473981baed174a8081048284bc9ffbf22cb90e18dc6a878105d5b517570c14fe1239dbecf9edbb001634d7953ab3b3d26b26d8f398f5222d8e594b9ab6725dcdf1dd534b56455ea20cb6207798d00d6e76f08f18e8cd1f5df3adaf76626f722d3c63538239af657df4dd362c3171e308cb66bbabe9dd837ae80aa3c4de35b05ec64cc4b70567679d4cc47227d686e94a23e891ca34e9b7c17229d11a858830e4812f12dde4812217b7fd8981288624721e2c1dc5b51ad0536b118c098fe4931e2e3cc38c537f5845c04b07df581131d21e441c2f7af6b736fb4a5accca8b748d", 0xf8, 0xa4af}, {&(0x7f0000000140)="2db7256ed54bf6b4f88ca0578eeaa9fcdef6ca95d7edf8a0cd1f98805127559ac6a1bd98c418eded59", 0x29, 0x7}, {&(0x7f0000000480)="e4e4794ad7c20f6f29b7c487befbce8b938e0115e7c71097d8a679d2b994fda54d1284dfe3d6f0731736a77bef16503b60f0341c29b7f2d0e40a0f3454e2efbcd308b6a3a733c3a113557f3092ad487f610c89cb8b6f2bebc390feb2771fc67159534a3cb6d81c4342052c4ecabe3d3b3acc6a89bd7ce91cac79695e8d18666e06e3b870e549", 0x86, 0x3}, {&(0x7f0000000540)="b992c8895a3f3b7f95b3fac026690c1e9d5846429417f55e2180fc6b20a472a6992a5eac8d58c335f5089f0251c720267f159225efc94af5196d4ede6926e317aa580d066ebc7d9b68332361c663ef69be51e1587657942e83436e9d312e00aa9e55439121d8768032759d2c616adc535d52a956755513c598cf589d066d54839c4cd159489d0cc8dd868098f61e390b", 0x90, 0x8000000000001099}, {&(0x7f0000000600)="d79fb571e04fd32b0f1a4023f6b2b22360b79d6242c8b0cd8ec567a9646338acbdfb558fb5586574797304a9d06141db7d7ddc0035686360d66d2087dec44b17e4b04cfec9abf75bab0d071da8dcb110dc38275adc240ad7f2ad2a387a9bd03572f1d80b6a4338dd06d6f127e6d6d8f0512a2e8b513e69092af9cc6d77e3e936336f8be700fbd38578b378", 0x8b, 0x4}], 0x8008, &(0x7f0000001800)=ANY=[@ANYBLOB="62dbf3d0b3312cb94ac473d6"]) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 19:09:19 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a000900020b021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1403.473654] binder: 1854:1858 unknown command -1650541819 [ 1403.493706] binder: 1854:1858 ioctl c0306201 20000340 returned -22 [ 1403.507239] binder: 1854:1861 ioctl 40046207 0 returned -16 [ 1403.558236] binder: 1870:1878 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05ffff4000020000"], 0x0, 0x0, 0x0}) 19:09:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1b]}) [ 1403.600229] binder: 1870:1881 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xe000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1403.675453] binder: 1885:1887 unknown command 1090518789 [ 1403.681103] binder: 1885:1887 ioctl c0306201 20000340 returned -22 19:09:19 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a000900020e021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1403.716038] binder: BINDER_SET_CONTEXT_MGR already set [ 1403.736213] binder: BINDER_SET_CONTEXT_MGR already set 19:09:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1403.760957] binder: 1885:1894 ioctl 40046207 0 returned -16 [ 1403.785987] binder: 1880:1891 ioctl 40046207 0 returned -16 [ 1403.792683] binder: 1885:1887 unknown command 1090518789 [ 1403.816300] binder: 1885:1887 ioctl c0306201 20000340 returned -22 19:09:19 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a000900020f021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10002, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000080)={0x2, 0xf419, 0x6, 0x3, 0x458, 0xb9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40400420}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, r2, 0x400, 0x5, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffff7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0x6c}}, 0x10) 19:09:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x2a]}) [ 1403.907428] binder: 1911:1914 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440000000009c9b946180ed7cf93a8e582e3304e9a7a9b85f749930a9927ef6ee123a0f7f7a95a6c7b7a82939afa4b32b47d4a1fc2e433c7806afef6e05119c36ed2e8d9f7c0348daf9e97878dfcf95789376d89705399d446cd67716e9480ab89ba2c02649bb50603f90300852088ad1babcdf7599a6613c77de3d759f1b8f7d9075e528bc99d57e6dbf926d1d4a058c0fd8c4c3df8f5db0faa199"], 0x0, 0x0, 0x0}) [ 1403.950133] binder: 1911:1917 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xe400, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1403.994473] binder: BINDER_SET_CONTEXT_MGR already set 19:09:19 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000210021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1404.018164] binder: 1920:1921 ioctl 40046207 0 returned -16 19:09:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x60400, 0x188) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x80, 0x888f, 0x29ad, 0x1}) 19:09:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xe401, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1404.066802] binder: BINDER_SET_CONTEXT_MGR already set [ 1404.080104] binder: 1926:1937 ioctl 40046207 0 returned -16 19:09:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:20 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000211021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1404.158912] binder: 1943:1946 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:20 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = semget(0x3, 0x7, 0x0) semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000040)=0x7) r3 = dup3(r0, r1, 0x80000) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x8, 0xc7c3, 0x10000, 0x2, 0x8, 0x4, 0x10000, 0x6a92, 0x6, 0x6, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1404.268305] binder: 1943:1954 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x2c]}) [ 1404.313954] binder: BINDER_SET_CONTEXT_MGR already set 19:09:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2f, 'cpu'}, {0x2d, 'cpu'}, {0x2d, 'memory'}, {0x2f, 'cpu'}, {0x2f, 'memory'}, {0x2f, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}]}, 0x2e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:20 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000212021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1404.342754] binder: 1951:1962 ioctl 40046207 0 returned -16 19:09:20 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x9, 0x6, 0x7c4a, 0x9, 0x3, 0x10, 0x6, 0x1, 0x9, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4840c1, 0x0) sendmmsg$alg(r1, &(0x7f00000013c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="9e0e662ad613d9245b99dfbb7eea0d8c4110e95e6f07ac7e43214ccefc842e9bb11e222af552317dffb532619d321e69c47fc58a3368c9b57fbd019539697c7f58df0f0dad0eebe3436f28a461a440", 0x4f}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c8, 0x8000}, {0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d0b7aeb47805430fe5a5f075b8baec08176ba90f41d0c550c489e990ba59c73dee3f6bc824aec3e327586a0b28ebe9bdde7e61cacfc5b73f4cf7b30f4460f24186890b18d468d04e5bafa159363842808784308cf02860e3dd25798b4d13931f9416c80e8b1ef047465f63a4a91e73d4496d4b5e574b3c2af75768d80ee1f90cb5c1a1bb070cf52b9a812fa2d67a7e233cf0ec8f29c529f617e7", 0x9a}], 0x1, &(0x7f0000000580)=[@assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf8, 0x117, 0x2, 0xe0, "89c8ed028d51ff0bd3efc52ea1d743c71b4aa0ad12f27b1c0e47b610702e245dbd0832a0047a4d4f450ed647ad6b837014e98145b46450a2989daa8329ff0451a6cbea3c475339bc8e466a54d723cd6de42f611eba03cf294f151e78ee5ef97fe8219b457466790f2f923606b5cd0b29c7099cb79f774ddac4f6ce0669b0d10dde6a05f47582251b3ffdeeb445b2173298f5c531bcb3e1eb6f26b497514952859bf6940418d1f18122a3282cd5150078e7d80c5a018b91e4c584002b1ad7b2c26138c3273667c666412bbc80b50ae3f15e68c20b2b783b164555cebe52671ff5"}, @assoc={0x18, 0x117, 0x4, 0x6d5f}], 0x140, 0x4000000}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="bafd194c1d87dbe3e149629bc4ab25695917614aa4245be3676ea9334ee9a0783b6f66aba4f33697541981b0e2d409d65df03ef4d0ba6b66a6925c9dfd49292880a88c68a78a7e", 0x47}, {&(0x7f0000000700)="73fdb36960c7b3d736efa323e0322fa3ca94eb67a1495627be3c9df3c8e58ac9d8d31f798ddb29789e1a180f80a5f509cc446c0df3057a3a324f5384e385d2ff0580bd68059f1ba2b105f4114ea1c4b9f7edca5f31ccb133b4d56db3108351538feb1058158f2b0f8ae387f1ebc6d8d6ef28c4ebd39cb7a5a0c5b3a1a830d71b2e70e4faa6695d90c74709a2fc8ed4c6d0f16a9c3cabf1f21def735606d10a506b4498323b5b6a91aef5e956b9770f24947692b317a8ccd011b0543d7529114a06c139008a41", 0xc6}, {&(0x7f0000000140)="5bcca40b0c70d272c27fa2d19ff4a62bf569393a23f2f28d9a7b9448031ce58ed97fee6181f5ac65bedad92b72ae6cd23700867c0c21", 0x36}], 0x3, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000840)="230a8be47b6befae8b9cf4cb519b8e5a7369dcb42f3fbf4ad88556ccf1693759b40f3ba9c6b7abb96aaf16e795d77bd68a9195351ec85b057afa69c9cafc381a3eac9da2c9f15b1aac70032e7cef206156155597a9ec", 0x56}, {&(0x7f00000008c0)="f7f11c06fdb6ee7b070f2a4156eda62bb2b87d3c45f04ac98eb2b04000e550c54d2144d4f537fd19073ec3d03b66ddd1fb7b0ec2af06142f3e94e467f25cdb3081c3787aa6b0e6679f158e9504c0be961d5bcacb31219c4d62d6d4c6df2ba776ddc9174f0d3cd0e9e3a1d55f18523d1f1bc2b2e8624efbf1c1ecb16a900c9cec4975420309621cdc93bcd07b66e073a7987d6cf3b1c6281007149533b650b4ffccddcf96b8236c7e88231e7ef2aa1398442c68df8556e4a3409266c85db4514a50471a34aab3f0a5178d389896ae687e266ef7452cd99d05580372401bd12c694d8320", 0xe3}, {&(0x7f00000009c0)="b9ca5a4c009bc45ab7a3774492f24ba4c582e6371c024eb8ce1760da64f530c65750fa3836cad99015dcce5e93655d24742a18fbd710cb1fc6794a2c455866bd8f64e19d32563609b195315a154a4f2f6a4c6c8b2248a33a6c5d8f6381adde52b81a244fe2862cab54c8fae1f4442cda64bbd5522511e7584faaa6757159f640ac7fd453c29b9eb61acf3ac99cb307b3dd969d844906363480ae0416691c46f21542fb64e83f3f57dd8d57e5b1edf5fc800b4fe9c3a185b74bb73fcab9c85e42741df95ecd0d43db", 0xc8}], 0x3, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b00)="1cd2c69847903cb0d4d145b6a980768d3f6fe59e72382f2714caf318b92851dee60e50c75b8b883b03fabab7fa61126876854764", 0x34}], 0x1, &(0x7f0000000b80)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4048000}, {0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000bc0)="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", 0xfa}, {&(0x7f0000000cc0)="44e9c803c814bd67b5d9dd2314e95fbbb7d00a3e35d4ed9442a1", 0x1a}, {&(0x7f0000000d00)="7492103c444794b1265fd7b3752f514d6547fd24f2a28e0a29e07cd63abc3287d801de60e8eed7f9b0efb4e68e08a26df9b2805669dffaf090ed71b647ec544f0511a3cc72d447b7c5b310372590a306a786d25fe8505da94d7d44166f446e67a110", 0x62}, {&(0x7f0000000d80)="07ce2ea87d1974d9a5ebd864dbcbcc3184adc207c8edc156503970f7a9f9bfd97195e0aac0b86bda7546a2ba66f886f0e3824045138c3202973a7146ef6720b1eef4de84638c2b9579652ab669c36353ba8c8b905dd7b692ca0f9c07ae5ce6197c60e3019f730c0dbf63b214608f865d6273563bf9ec1e9c507d5c668051e687b66e9e3b300cac36a71dcd5828bef628145984be8c21f0eaf5b0e9ad30eff768a5dc83eb7d6e0acfe1b5ee00e7cb3f63581187cadf8828925b3ea215c1d2855ff59d49c224", 0xc5}, {&(0x7f0000000e80)="b04179ebcd37a697d333ffa9425c13807fd38236066ff350724b09ff7cab147e18fa1f018d04a010dce073e4c5379b71e5bd536e1d0ff6c78383f8f94b1afb", 0x3f}, {&(0x7f0000000ec0)="2f2930cce4263b9700efc65156bbfa9e02945f8d084fde83a9e8194b572f6d3a48c50b4db6a7b6d352c01b8ef814a8e5029c89396c153b9e9a28370ea7876e623a05c3eff5a3b35119913baecd34d0aaeabf78eab2dfbbac0b292249db82779f70f28c1b71ec96a573bc19c2cf2e6096447ef0fca90ebcb342b69397c882bc725bdb2ee29534efca78342619073d0d9bebf20560a947ea080254c142556202b4580f5ecabd53343c5fb105", 0xab}, {&(0x7f0000000f80)="1d0dd63e2f67a05bd4e21d7eecfbcd5504ff1d6e44fdd1b5337604f82ce6ccb1af3b5cf40612216e9b9c47bd11f835f1a494bce2f2bd3ffd8fa71ff793be4c59877a6fb211c948e7a58e06d3bb78adcac232229a6c410199558eadd8752154b8227b84310890b4d2fe3547f0a3acdf5e5e68", 0x72}, {&(0x7f0000001000)="b5f6e74ace14975acf934384bd3f5a68d8bf8bef6e", 0x15}, {&(0x7f0000001040)="52b388b8ae8c886ee821bd73e5ec176d4e7eecf5d6034b645eb4fd71e1fa97aaaf87721fa80ec68a441c368d7eb3d317e49f2bbce79719eb4cf4e38176503374859d44750350ab7677ec8d91fdf95543c69a60bd2db94b434e938329ce4edcc151af80a2385255b569b364d476995f2b77d41f729ebc076c44e339b4173dff251183a9d6d02236cdb6c402ce2a1e176b0a981ed360659dbf2a848823d1b13404d81c73ce7d9384b3fc3a36c81f5ad4de01e32ba18d41edd2e925e4d913939d659e8e2d0f767b577d512da1f92d58e65ce3", 0xd1}], 0x9, &(0x7f0000001200)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x5, "fa9c675169"}, @op={0x18}], 0x68, 0x4}, {0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001280)="e19f9e240806693353cd90426e4eab3ea3bfcc5e09e89c6b62525d3c6cc399450b1caa9865afa5406bde3732693e72972500", 0x32}, {&(0x7f00000012c0)="85f09471d1c0e8006b8211213c6e539294faba3667cd1f6e130d6505aca367a1f3abb6d3376cc16c99452a789fd9e4e38c282c2b253164ea4d08c2f7337c3a39f147d5435f898a8e", 0x48}, {&(0x7f0000001340)="8df7ca3f67496f11df9fbba806fa4cbfe2914823dd307adf27d457c1f440e3401b4e123277c481b611e1b2", 0x2b}], 0x3, 0x0, 0x0, 0x40}], 0x7, 0x800) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7) 19:09:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xe403, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1404.484795] binder: 1973:1978 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1404.546654] binder: 1973:1984 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1404.575019] binder: BINDER_SET_CONTEXT_MGR already set 19:09:20 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000213021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1404.594993] binder: 1974:1981 ioctl 40046207 0 returned -16 19:09:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3f, 0x200000) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)=@random={'user.', ']wlan0]lovboxnet1systemposix_acl_access\x00'}, &(0x7f00000003c0)='ip6erspan0\x00', 0xb, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xd4, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8698}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff63}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xe3cb}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x34]}) 19:09:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) [ 1404.625153] binder: BINDER_SET_CONTEXT_MGR already set [ 1404.630514] binder: 1983:1990 ioctl 40046207 0 returned -16 19:09:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000000)={0x8, 0x5, 0x0, [{0x7, 0x4, 0x1, 0x81, 0x1, 0x2, 0x9}, {0x4, 0x3, 0x6, 0x2, 0x10001, 0xffff, 0x8000}, {0x1, 0x77ea, 0xa0, 0xfffffffffffff521, 0xfffffffffffffe00, 0x0, 0xff}, {0xffffffffffffff45, 0x1, 0x7e00000000000, 0x2, 0xbff8, 0x2, 0x8}, {0x0, 0x8, 0x200, 0x5, 0x5, 0xffffffff, 0x4}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:20 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000260021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:20 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0xfffffffffffffffc) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3e8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x4, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x7) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563044000000000a7f08e2b72360ed6ea3786cc68a688ec99fe0533ed445459862161ed1b5708c5cc1b8325dc62756dc85fc9eaa9d651244a7adec8cecdc19cb3b297caa55f157b262de3194fd808be75f551f4b6010ec206a0ff0d18439280e2d743dec64398dbef366329cfda09381201a5273a"], 0x0, 0x0, 0x0}) 19:09:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xe803, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x78, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1404.895269] binder: 2018:2022 ioctl c0101282 20000000 returned -22 [ 1404.936795] binder: BINDER_SET_CONTEXT_MGR already set [ 1404.942359] binder: 2019:2023 ioctl 40046207 0 returned -16 [ 1404.955409] binder: BINDER_SET_CONTEXT_MGR already set 19:09:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x3a]}) 19:09:20 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x20000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xee03, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1404.980274] binder: 2018:2027 ioctl 40046207 0 returned -16 [ 1404.996285] binder: 2018:2022 ioctl c0101282 20000000 returned -22 19:09:20 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200031d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056396215d30025c3d4bb3044000000000"], 0x0, 0x0, 0x0}) 19:09:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB], @ANYBLOB="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"]], 0x0, 0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000080)=""/184) [ 1405.104513] binder: BINDER_SET_CONTEXT_MGR already set [ 1405.144712] binder: 2044:2045 ioctl 40046207 0 returned -16 [ 1405.180271] binder: BINDER_SET_CONTEXT_MGR already set 19:09:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xf003, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:21 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200051d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1405.211241] binder: 2044:2045 ioctl 40046207 0 returned -16 [ 1405.211440] binder: BINDER_SET_CONTEXT_MGR already set [ 1405.223420] binder: 2056:2057 unknown command 563503877 [ 1405.243041] binder: 2047:2059 ioctl 40046207 0 returned -16 [ 1405.254305] binder: BINDER_SET_CONTEXT_MGR already set 19:09:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x3b]}) [ 1405.259006] binder: 2047:2065 unknown command 536871744 [ 1405.269029] binder: 2047:2065 ioctl c0306201 200002c0 returned -22 [ 1405.292803] binder: 2056:2057 ioctl c0306201 20000340 returned -22 [ 1405.299704] binder: 2044:2058 ioctl 40046207 0 returned -16 19:09:21 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200031d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1405.321632] binder: 2056:2071 unknown command 563503877 [ 1405.327643] binder: 2047:2059 unknown command 536871744 [ 1405.340029] binder: 2056:2071 ioctl c0306201 20000340 returned -22 [ 1405.350156] binder: 2047:2059 ioctl c0306201 200002c0 returned -22 19:09:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) 19:09:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x48]}) 19:09:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563044000000000cf32150d3c328731281680b8f19215912d4116186198d2be35797fb2a0"], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x2c400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000240)={0x1, {}, 0x3b, 0x7}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4100, 0x0) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='coda\x00', 0x40000, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x1000) 19:09:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5, 0x0, &(0x7f00000001c0), 0xfffffffffffffffa, 0x0, 0x0}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x280000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @loopback}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1ffffffd}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv4_getnetconf={0x44, 0x52, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xffffffff}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x2}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 19:09:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xf203, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1405.543347] binder: 2084:2089 unknown command 0 19:09:21 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200041d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1405.568612] binder: 2084:2089 ioctl c0306201 20000340 returned -22 [ 1405.590126] binder: BINDER_SET_CONTEXT_MGR already set [ 1405.611702] binder: 2084:2100 ioctl 40046207 0 returned -16 19:09:21 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440000800004ae979fdabdb25cc99daa937c99ee179388a80e9dff74947c459811e2f2af90d5b5897316fba18a2537e5662c5f007cb29fc957c2d8cbc4094982678865ce1c6b6e7b206cd7aed666c41a50179a23e48036131d194d7879c6d828501eea6ba98da77e6523b1c2f91022577c542e4875cedd07b5bed60754cfd76f6066ac58298fbd00d552eb5ea0de1dffa5c447d8368a8e6ae70"], 0x0, 0x0, 0x0}) [ 1405.619001] binder: BINDER_SET_CONTEXT_MGR already set 19:09:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="a271"], 0x0, 0x0, 0x0}) [ 1405.658597] binder: 2097:2098 ioctl 40046207 0 returned -16 [ 1405.665075] binder: 2097:2104 ioctl 41009432 20000000 returned -22 19:09:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x8b]}) 19:09:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000003c0)={0x0, 0xc5d8}) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vivid(&(0x7f00000002c0)='/dev/video#\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xfffffffffffffd82, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x48800, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000340)=""/41) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb000000addabfcf491a60703656f2680c05273c7245ef29d7b5d6229e6d60dfd3e7870fa926068bf6ea17cca7f26bbe60255262953407b6fc638e96585317557394b465f1445d13e89ee298d7657cef2fb3ae06f7ce6caa86e8c36da3d596dea94bf9235b6ed366af1a86107d873515ffff0000768b9109e71aec518280a11d2a452b47a97e38262884c68400cde65b7811dea9ce94a481965489a571b22e00055d88a3f7badecb879df97f48e1087df4829c4d301306000000000000004a57ba5dc8a5b73b3768d4"], &(0x7f0000000140)=0xd3) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x7}, &(0x7f0000000240)=0x8) [ 1405.724036] binder: 2097:2098 unknown command 0 [ 1405.739920] binder: 2097:2098 ioctl c0306201 20000340 returned -22 [ 1405.773914] binder: 2097:2104 ioctl 41009432 20000000 returned -22 [ 1405.815687] binder: 2097:2116 unknown command 0 19:09:21 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200051d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1405.836290] binder: BINDER_SET_CONTEXT_MGR already set [ 1405.856319] binder: 2097:2116 ioctl c0306201 20000340 returned -22 [ 1405.870858] binder: 2117:2122 ioctl 40046207 0 returned -16 19:09:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xf403, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1405.894956] binder: 2117:2127 unknown command 29090 19:09:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x800) sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f0000000140)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000200)="f21de2e1839fa911fd292c931495967df4d7c4966ba43e8f3641521e911eb3edaa9cc92eadee921155f94a89aa61f243b3abc24856250fd4933139f05d54f4841d27a82757372a1db1631c6fe17345bdfc8ad7c6b76f044f164d523b99975422e5c708c81f8e578c13ed248c5d3f5972b7f08383513927f86a289cecbc28d7a1e59fda0acff7f472be22", 0x8a}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f00000002c0)="b9ebc6926676ba68dc2416fa5d874046fe53355e75f053abf26118f3329eb7005658b6c61527c1deb555dd0e5cae79d94081e05b96fe5e6e4c23d6f512d0562ef97524df6a5e0021179cb65ace6adeee6233d10ab5d96ef77310a79032509007f9149d38cd8e5620", 0x68}, {&(0x7f0000000380)="267f9ebb3b21b45f2e36ca85b9021473debd38680a893ce1dfa1b0dc683e065563312f0c9ba2b5b103f5da77d6bdf22bad6eb225c4ba3759d86e7b2b794ab9bbf78f986fbc39614851409b7dbc2fca995649bae29d00aeeb8e971931c4dddfe51579785d095f621e4f48fa7d938693635f9bf7d0e37d982bce48298a0c42dfaf05a3b285fcd0410035a561995d03d3a76ffc923ceb7ab7e216c0c9de3128f6842ba142cbc4eb8f580791fba214c06f3b4ebd6ab3b1bd3d281615774e469ccc29e9d6ba911eac21fca6142e2c74beb90897", 0xd1}, {&(0x7f0000000480)="69ff28b7d714da45303dd61dc22382243b8eb02b6a1ce237a31dfbc7", 0x1c}, {&(0x7f00000004c0)="c65ff6cc59acb74d2240af3ce7de01ec674777beedaf63a5f38365fee21f341e57f5f063efc70e589df3aec3807b1728630ef8a0e0106c87747f56630ab0f9fc1f27d53da2749d432f5c7fbbc70333ead1acbe7277fac92ab802f0ad8b59d6679f5c7e1a72537bc0d6d369c497992cf2731679ac6579a5539abf711b6c2357", 0x7f}, {&(0x7f0000000540)="3e09fc73c4fbc95591e4b09fdaab662dad00262953a5eca1ae4048e7b97ef64c898a05f77a682633", 0x28}], 0x8, 0x0, 0x0, 0x20008001}, 0x4000) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000040)={0x402}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700ff0700000001"], 0x0, 0x0, 0x0}) [ 1405.922781] binder: 2117:2127 ioctl c0306201 20000340 returned -22 [ 1405.958253] binder: 2117:2122 unknown command 29090 19:09:21 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = getpid() ptrace$setopts(0x4206, r1, 0x4, 0x1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000040)) [ 1405.984480] binder: 2117:2122 ioctl c0306201 20000340 returned -22 19:09:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x9e]}) 19:09:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1406.093880] binder: 2136:2137 unknown command 134152199 [ 1406.099406] binder: 2136:2137 ioctl c0306201 20000340 returned -22 19:09:22 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568041baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1406.195732] binder: BINDER_SET_CONTEXT_MGR already set [ 1406.224754] binder: 2136:2141 unknown command 134152199 [ 1406.237668] binder: 2140:2148 ioctl 40046207 0 returned -16 [ 1406.237685] binder: BINDER_SET_CONTEXT_MGR already set [ 1406.267136] binder: 2146:2149 ioctl 40046207 0 returned -16 [ 1406.278052] binder: 2136:2141 ioctl c0306201 20000340 returned -22 19:09:22 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568051baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:22 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x7f}, 0x1c) 19:09:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2400, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x8000, 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x200400) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xc1]}) [ 1406.517064] binder: 2163:2168 unknown command 0 [ 1406.541927] binder: 2163:2168 ioctl c0306201 20000340 returned -22 [ 1406.614676] binder: BINDER_SET_CONTEXT_MGR already set [ 1406.652763] binder: 2163:2178 ioctl 40046207 0 returned -16 [ 1406.666717] binder: 2163:2168 unknown command 0 [ 1406.700161] binder: 2163:2168 ioctl c0306201 20000340 returned -22 19:09:22 executing program 0: socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="66ce4d193c70c4688a1dc57aa8600032d7bba5a51ee64757398cb2c8c6ceafc88dbf907f2f426d9d319adcae00293962ae971644cc914a1eca7a15eea02270c9d037f2d092f237580fb503019b72f514ec2075f381507fbf54776139fae5dfbdc2d3c812b6295776e7bb490cca0c3984c42bc58f7101a87cfec8beed0fa10a131d74b45d0c5939b90e4435bfb2aefe636b0d6c94cbe932ca"], 0x0, 0x0, 0x0}) 19:09:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xf802, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:22 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20200ff7e", 0x24}], 0x1}, 0x0) 19:09:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x236040, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x9, 0x8, 0x3}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xc2]}) 19:09:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0xfe6a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000e0100003bdecac8cb735cf48da000fa187003ce7a8526a8fa70b7693f33ab33883cdc69681604ba4023cc3cf02ec3f57350e77b8b2743c8fb79183bf630824235504245df32f7d7082be48a6445ef0af41e752b26b8c0673181631faa09625a03f03392b01e41d7a2fd70dee2"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000200)) [ 1407.119110] binder: 2186:2193 unknown command 424529510 [ 1407.126454] binder: 2188:2194 unknown command 69120 [ 1407.137902] binder: 2186:2193 ioctl c0306201 20000340 returned -22 [ 1407.146892] binder: 2188:2194 ioctl c0306201 20000340 returned -22 [ 1407.156962] binder: BINDER_SET_CONTEXT_MGR already set 19:09:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xcd]}) 19:09:23 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20300ff7e", 0x24}], 0x1}, 0x0) [ 1407.183988] binder: 2186:2201 unknown command 424529510 [ 1407.189562] binder: 2188:2202 unknown command 69120 [ 1407.189615] binder: 2186:2193 ioctl 40046207 0 returned -16 [ 1407.219922] binder: 2188:2202 ioctl c0306201 20000340 returned -22 [ 1407.223221] binder: 2186:2201 ioctl c0306201 20000340 returned -22 19:09:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e363504000000000"], 0x0, 0x0, 0x0}) 19:09:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="edbd9f2d8402d72484a9d9430c3ecdaef89877d1bf86c66cc7ea1784b8924b6e575d841c7f4a6f6ca98c1b0cbdd81ad8ea825aa747584d0b3aa26c264cf953c3f2cbc15baa44881f4aa2f9c1d40af892a2c011dd49a81e0179d8e7dca354d194fcfd535b8b062a82bcd8c6c77e9d52649862ddf00df14e3bd18748bc911f51ff70216507d895a57f1e365b6938d880283b30add2db4592f72456fe69c5293064adce9a990537afd142bedcf8bd8a3ac1f6c605d2852d833e", 0xb8, 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0x0) keyctl$reject(0x13, r0, 0xce7, 0x7, r1) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563040600ace7f2c25494522ea26a7faf8e4bd6a4de0d8d1fb86001c394e7eef73f9b37035cecfb2e9aadbe3f876c2c95524d6f831bfea670db72d01f181a8dbc8391ac499bf531677d8b37de11df038115edd09fe21b24af2442f5"], 0x0, 0x0, 0x0}) 19:09:23 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20402ff7e", 0x24}], 0x1}, 0x0) [ 1407.391470] binder: 2215:2219 unknown command 1079010275 [ 1407.433120] binder: 2222:2224 unknown command 100950789 19:09:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xff, 0x60000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630401a95604051b0c866d3c624000000000"], 0x0, 0x0, 0x0}) [ 1407.463453] binder: 2222:2224 ioctl c0306201 20000340 returned -22 [ 1407.477857] binder: 2215:2219 ioctl c0306201 20000340 returned -22 [ 1407.491987] binder: BINDER_SET_CONTEXT_MGR already set [ 1407.514422] binder: BINDER_SET_CONTEXT_MGR already set [ 1407.519711] binder: 2215:2231 ioctl 40046207 0 returned -16 [ 1407.547366] binder: 2222:2228 ioctl 40046207 0 returned -16 [ 1407.554997] binder: 2232:2233 unknown command 17064709 [ 1407.562276] binder: 2215:2235 unknown command 1079010275 [ 1407.577830] binder: 2215:2235 ioctl c0306201 20000340 returned -22 [ 1407.581325] IPVS: ftp: loaded support on port[0] = 21 [ 1407.601643] binder: 2232:2233 ioctl c0306201 20000340 returned -22 [ 1407.647333] binder: 2232:2233 unknown command 17064709 [ 1407.653420] binder: 2232:2233 ioctl c0306201 20000340 returned -22 [ 1407.741099] chnl_net:caif_netlink_parms(): no params data found [ 1407.756516] device bridge_slave_1 left promiscuous mode [ 1407.761957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.833560] device bridge_slave_0 left promiscuous mode [ 1407.839103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.975904] device hsr_slave_1 left promiscuous mode [ 1408.037420] device hsr_slave_0 left promiscuous mode [ 1408.097177] team0 (unregistering): Port device team_slave_1 removed [ 1408.107377] team0 (unregistering): Port device team_slave_0 removed [ 1408.118887] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1408.167082] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1408.232051] bond0 (unregistering): Released all slaves [ 1408.338618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.345355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.352154] device bridge_slave_0 entered promiscuous mode [ 1408.358956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.365572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.372475] device bridge_slave_1 entered promiscuous mode [ 1408.387717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1408.396543] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1408.412067] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1408.419435] team0: Port device team_slave_0 added [ 1408.424923] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1408.431987] team0: Port device team_slave_1 added [ 1408.437196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1408.444570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1408.504980] device hsr_slave_0 entered promiscuous mode [ 1408.562799] device hsr_slave_1 entered promiscuous mode [ 1408.619010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1408.625954] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1408.639657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.646000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.652540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.658905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.745139] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1408.751324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.759174] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1408.767766] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1408.774676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.781580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.790046] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1408.801516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1408.808503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1408.817635] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1408.826063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.838270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1408.848733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.855220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.877312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1408.890605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.896993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.920061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1408.930237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1408.941753] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1408.949335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1408.957468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1408.965395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1408.979272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1408.991662] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1409.004512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1409.011726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1409.027771] 8021q: adding VLAN 0 to HW filter on device batadv0 19:09:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xf803, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xce]}) 19:09:25 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(r0, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:25 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20403ff7e", 0x24}], 0x1}, 0x0) 19:09:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x8, 0x2, "956a221a198ab4ca5bf7510163ea706a38e2d741bb25915998506f89350ca0a5"}) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="90f2efef06087bff"], 0x0, 0x0, 0x0}) [ 1409.143203] __nla_parse: 53 callbacks suppressed [ 1409.143211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1409.251037] binder: 2257:2262 unknown command -269487472 [ 1409.261186] binder: BINDER_SET_CONTEXT_MGR already set [ 1409.272397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1409.276089] binder: 2257:2262 ioctl c0306201 20000340 returned -22 [ 1409.294224] binder: 2253:2259 ioctl 40046207 0 returned -16 [ 1409.300111] binder: BINDER_SET_CONTEXT_MGR already set [ 1409.310115] binder: 2258:2266 ioctl 40046207 0 returned -16 [ 1409.313333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1409.326021] binder: 2257:2270 unknown command -269487472 [ 1409.334596] binder_thread_write: 6 callbacks suppressed [ 1409.334608] binder: 2258:2266 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='/dev/binder#\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563044000000000543d3058663ddb6b7c3f58a3bf20369e84401ba5be8a61dcd7b2968384494995352a52d05fd6c019d330f3a775e8bab93c61f956b1efe22228551e03aec0d9f63f0fc7840184a9a44c15fb91ee707d0fbc6ed183889490ff190a7e6a76b9fa781e52a78c3dea79448613485d0ea7fdeaa6853de70812feb4298dabb0f379e9c46b21a4c8435d313e99cb"], 0x0, 0x0, 0x0}) 19:09:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xfc03, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1409.344565] binder: 2257:2270 ioctl c0306201 20000340 returned -22 [ 1409.354267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xfe]}) [ 1409.441835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1409.451827] binder: BINDER_SET_CONTEXT_MGR already set [ 1409.479278] binder: 2275:2277 ioctl 40046207 0 returned -16 19:09:25 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x88040, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42400) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01bcf4279c680563f49e336bf88e044000000000"], 0x0, 0x0, 0x0}) [ 1409.527894] binder: BINDER_SET_CONTEXT_MGR already set [ 1409.561310] binder: 2280:2284 ioctl 40046207 0 returned -16 19:09:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6c, 0x24000) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1804000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x73}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@rose, @remote, @netrom, @remote, @netrom, @rose, @bcast, @default]}, &(0x7f0000000080)=0x80) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000400)={0x21, 0x3, 0x0, {0x6}}, 0x21) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0563044000000000b2f6aae07608766708170958ee97b8cf972754d65627fd8a928dd8b9e45ef3000042d9936619ef542f1057a8f99ac35c3c7a2f6ba5eefbb75785af23f20c17172a728152fa0105021d2ae5d3bceac2f188128ff2ca33bf"], 0x0, 0x0, 0x0}) 19:09:25 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20404ff7e", 0x24}], 0x1}, 0x0) [ 1409.585918] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x12000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) [ 1409.706250] binder: BINDER_SET_CONTEXT_MGR already set [ 1409.717986] binder: 2291:2305 unknown command 670350337 [ 1409.743982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1409.744314] binder: 2294:2296 ioctl 40046207 0 returned -16 [ 1409.772666] binder: 2291:2305 ioctl c0306201 20000340 returned -22 [ 1409.791050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x10a]}) [ 1409.822083] binder: BINDER_SET_CONTEXT_MGR already set [ 1409.826467] binder: 2291:2298 unknown command 670350337 [ 1409.840558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1409.849912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1409.861718] binder: 2291:2298 ioctl c0306201 20000340 returned -22 [ 1409.867214] binder: 2308:2312 ioctl 40046207 0 returned -16 19:09:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000000)) 19:09:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x14000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1409.909150] binder: 2308:2319 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x200, 0x0) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x3f, 0x2000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x101080, 0x0) socketpair(0x5, 0x0, 0x1ff, &(0x7f0000000400)) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) r2 = accept$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0xf226e242) getsockopt$packet_int(r2, 0x107, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:25 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20405ff7e", 0x24}], 0x1}, 0x0) 19:09:25 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1410.029240] binder: BINDER_SET_CONTEXT_MGR already set [ 1410.057043] binder: 2323:2331 ioctl 40046207 0 returned -16 19:09:26 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20406ff7e", 0x24}], 0x1}, 0x0) [ 1410.156031] binder: 2332:2345 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x16000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1410.208918] binder: 2332:2345 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1410.210571] binder: BINDER_SET_CONTEXT_MGR already set 19:09:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x11e]}) 19:09:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xff, 0x0, 0x10000, 0x2, 0x0, 0xffffffff80000000, 0x40000, 0x4, 0xabb, 0x2, 0x7fffffff, 0x2, 0x7d7, 0x9, 0x5, 0x8000, 0x5, 0x5, 0x40, 0x4, 0x2, 0x1, 0x3f, 0x9, 0xffffffffffffff81, 0x200, 0x5b, 0x0, 0x1000, 0x4, 0xf6d, 0x3, 0x7fffffff, 0x80, 0x8, 0x2, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x3, 0xffff, 0xf, 0x55, 0x7fff000000000000, 0x4}, r2, 0x5, r0, 0x1) 19:09:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x1, 0x0, 0x0, 0x6, 0x400000000000, 0x9, 0x4, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={r3, 0x11, "1d7ddb64382b1d20f9a9915085f5e615e7"}, &(0x7f0000000240)=0x19) [ 1410.273508] binder: 2343:2352 ioctl 40046207 0 returned -16 19:09:26 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20408ff7e", 0x24}], 0x1}, 0x0) 19:09:26 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044011000000"], 0x0, 0x0, 0x0}) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) [ 1410.383727] binder: BINDER_SET_CONTEXT_MGR already set [ 1410.438337] binder: 2359:2365 ioctl 40046207 0 returned -16 19:09:26 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20200, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x7fff, 0x0, 0x4, 0xff, "8855572c9d88cd295041f1bc23be807f3b8e2a9568635e9baddaa2ad71b03065"}) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4800, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x12717, 0x0, &(0x7f0000ffd000/0x3000)=nil}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x6ab944ec, 0x7fffffff, 0x4, 0x9, 0x5, 0x5, 0xb2, 0x200000000000000, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x3, 0x8001, 0x800, r4}, &(0x7f0000000240)=0x10) r5 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="046257bbf4000000201d6d4a858716dfd6205eb4fcda0bb39aa3657c5d43e02bae94cd6c1b2bb7dcf59fc127af7878e94c6cf5cffd0194158732387d"], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000500)={0x11, 0x1d, r6, 0x1, 0x8, 0x6, @local}, 0x14) r7 = getuid() getgroups(0x3, &(0x7f0000001180)=[0xee01, 0xffffffffffffffff, 0xee01]) fstat(r2, &(0x7f0000001200)) getresgid(&(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)=0x0) getresgid(&(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)=0x0) r10 = getgid() getgroups(0x40000000000002b5, &(0x7f00000011c0)=[r10, 0xee00, 0x0, 0xee01, r9, 0xee01, 0xffffffffffffffff, r8, 0xee00]) r12 = geteuid() r13 = getegid() r14 = getuid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xee01, 0x0]) r18 = geteuid() stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000700)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000640)=0xe8) getgroups(0x4, &(0x7f0000000680)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) fstat(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = geteuid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000b40)={0x5f0, 0xffffffffffffffda, 0x2, [{{0x6, 0x0, 0x100, 0x200, 0x6aa37960, 0x800, {0x2, 0x2, 0xfffffffffffffffc, 0x7, 0x661, 0x101, 0xff, 0x2, 0x7, 0x8, 0x855, r7, r11, 0x1cc, 0x1ff}}, {0x1, 0x1, 0xd, 0x9, 'veth1_to_hsr\x00'}}, {{0x6, 0x1, 0x4, 0xfffffffffffffff6, 0x1, 0x8001, {0x1, 0x5, 0x2, 0x1ff, 0x80000000, 0x8f51, 0x8, 0xd7a, 0x2, 0x1fa, 0x0, r12, r13, 0x0, 0x8}}, {0x6, 0xb, 0x18, 0x9, '&\x1f)(,vboxnet0em0,vmnet0{'}}, {{0x5, 0x1, 0x1, 0x17, 0x6, 0x2d5, {0x2, 0x578, 0x5, 0x80, 0x1000, 0xb70, 0x4, 0x3, 0x3f, 0x8, 0x2, r14, r15, 0x8, 0x21472fb}}, {0x0, 0x7000, 0xd, 0x2, '/dev/binder#\x00'}}, {{0x5, 0x1, 0x4, 0x5, 0x1, 0xffffffffffff510d, {0x3, 0x5, 0x100000000, 0x2, 0x6, 0x7, 0xfffffffffffffffb, 0x6d31, 0x101, 0x9, 0x0, r16, r17, 0x3, 0x1}}, {0x5, 0x4, 0x12, 0x8, '/dev/snd/pcmC#D#p\x00'}}, {{0x1, 0x3, 0x4, 0x4, 0x1f3, 0xff, {0x0, 0x81, 0x1, 0xd3, 0x100000001, 0x12, 0xff, 0x101, 0x5, 0x3, 0x401, r18, r19, 0xe112, 0xfffffffffffffffa}}, {0x6, 0x2, 0x11, 0x0, '/dev/dlm-control\x00'}}, {{0x2, 0x3, 0x200, 0x1000, 0x81, 0x7ff, {0x6, 0x1, 0x7e0, 0x5, 0x4, 0xffff, 0x4, 0x73d, 0x1, 0x87af, 0x7fff, r20, r21, 0x3, 0xffffffff}}, {0x2, 0xf038, 0x0, 0x7}}, {{0x5d4, 0x0, 0x531c, 0x6, 0x8001, 0x56, {0x4, 0x78, 0x4, 0x9, 0x400, 0x5, 0x2, 0x0, 0x5, 0x80000000, 0x401, r22, r23, 0xffffffffffff0dee, 0x80}}, {0x3, 0x80000000, 0x10, 0x8, '/dev/sequencer2\x00'}}, {{0x5, 0x0, 0x5, 0xf2d, 0x8000, 0x100, {0x1, 0x5, 0x6, 0x4, 0x0, 0x472, 0x0, 0xd, 0x5, 0xc326, 0xff, r24, r25, 0x9}}, {0x2, 0x2, 0x1, 0x2b0, '['}}, {{0x5, 0x1, 0x8, 0xfffffffffffffffd, 0x5, 0x9, {0x3, 0x5, 0x1, 0x8, 0x6, 0x7, 0x8, 0x3, 0x82cf, 0x968b, 0x200, r26, r27, 0xffffffffffff0000, 0x400}}, {0x0, 0x13c, 0x4, 0x1, '^em1'}}]}, 0x5f0) [ 1410.493732] binder: 2373:2374 Acquire 1 refcount change on invalid ref 17 ret -22 19:09:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x1f400, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:09:26 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20409ff7e", 0x24}], 0x1}, 0x0) [ 1410.544043] binder: BINDER_SET_CONTEXT_MGR already set [ 1410.563078] binder: 2373:2382 ioctl 40046207 0 returned -16 [ 1410.580292] binder: 2373:2374 Acquire 1 refcount change on invalid ref 17 ret -22 19:09:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x140]}) 19:09:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 1410.697364] binder: 2385:2393 unknown command -1151901180 [ 1410.704574] binder: BINDER_SET_CONTEXT_MGR already set [ 1410.725493] binder: 2387:2396 ioctl 40046207 0 returned -16 [ 1410.736217] binder: 2385:2393 ioctl c0306201 20000340 returned -22 19:09:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563044000000000375ddd72de6e6d08ffafb71875593a3e706377227d9e4766f83e15dc55ea93f4c5244d0384ba0e9f17a1da508bade595c66b37959fb35f3143f9b3622dbc503df6aa1571f01b222d9943b9539309f07de2055f6a7daafa329589cb3a1d836784a51b8c3caa2f12d73589abc78c7b3dc702c891f5bac01d52037e5185ae8e9ff78bddbfe8815f0aa58c12b885bcff4c0300bad635c16e877c67d8bd507afe0a8780599a2d395ab1a80a17b9845a180cddb24efc805e909a32"], 0x0, 0x0, 0x0}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 1410.789305] binder: 2385:2393 unknown command -1151901180 [ 1410.803339] binder: BINDER_SET_CONTEXT_MGR already set 19:09:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x40000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:26 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba2040aff7e", 0x24}], 0x1}, 0x0) [ 1410.840927] binder: 2385:2393 ioctl c0306201 20000340 returned -22 [ 1410.854227] binder: 2399:2409 ioctl 40046207 0 returned -16 [ 1410.904421] binder: BINDER_SET_CONTEXT_MGR already set [ 1410.924247] binder: 2413:2418 ioctl 40046207 0 returned -16 19:09:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) geteuid() ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e54539a89737a0630b9daa6c56bb8e6e46b94ef35870b3b7d544fd90300cf3dcdf03ca1d1962d9b1b7b4ceded5c6c3fe01c40dc"], 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000000), 0x4000) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x301000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x280000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r3}}, 0x18) [ 1410.951107] binder: 2413:2423 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x174]}) 19:09:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x80000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1411.045014] binder: BINDER_SET_CONTEXT_MGR already set 19:09:26 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba2040bff7e", 0x24}], 0x1}, 0x0) [ 1411.081547] binder: 2425:2428 ioctl 40046207 0 returned -16 [ 1411.081549] binder: BINDER_SET_CONTEXT_MGR already set [ 1411.081574] binder: 2413:2423 ioctl 40046207 0 returned -16 [ 1411.105154] binder: 2436:2437 unknown command -1705815010 [ 1411.110900] binder: 2436:2437 ioctl c0306201 20000340 returned -22 19:09:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1411.134870] binder: 2413:2418 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1411.211895] binder: 2436:2449 unknown command -1705815010 [ 1411.221676] binder: 2447:2450 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1411.250548] binder: 2436:2449 ioctl c0306201 20000340 returned -22 19:09:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1411.256582] binder: 2447:2453 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:27 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba2040eff7e", 0x24}], 0x1}, 0x0) 19:09:27 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="c5d6ef9a2dbdd29a"], 0x0, 0x0, 0x0}) 19:09:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x175]}) [ 1411.378615] binder: 2456:2464 unknown command 0 [ 1411.411605] binder: 2456:2464 ioctl c0306201 20000340 returned -22 19:09:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x200000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1411.453614] binder: 2466:2471 unknown command -1695557947 19:09:27 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba2040fff7e", 0x24}], 0x1}, 0x0) [ 1411.494941] binder: 2466:2471 ioctl c0306201 20000340 returned -22 [ 1411.505257] binder: 2456:2475 unknown command 0 [ 1411.535173] binder: BINDER_SET_CONTEXT_MGR already set [ 1411.562045] binder: 2456:2475 ioctl c0306201 20000340 returned -22 [ 1411.568876] binder: 2466:2479 ioctl 40046207 0 returned -16 [ 1411.594825] binder: 2466:2471 unknown command -1695557947 19:09:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x176]}) [ 1411.617793] binder: 2466:2471 ioctl c0306201 20000340 returned -22 19:09:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x3}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000), 0xffffffffffffff2a, 0x0, 0x0}) 19:09:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7ff) syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 19:09:27 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20410ff7e", 0x24}], 0x1}, 0x0) 19:09:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x200100, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1411.828100] binder: 2497:2508 unknown command 1986356271 [ 1411.849411] binder: 2497:2508 ioctl c0306201 20000040 returned -22 19:09:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1411.881060] binder: 2497:2508 unknown command 1986356271 19:09:27 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20411ff7e", 0x24}], 0x1}, 0x0) [ 1411.971630] binder: 2497:2508 ioctl c0306201 20000040 returned -22 [ 1411.992928] binder: BINDER_SET_CONTEXT_MGR already set 19:09:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x240000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:27 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x3f, @loopback}, {0xa, 0x4e22, 0x1f, @mcast2, 0x4}, 0x3, [0x1f, 0xdd, 0x380, 0x3, 0x1, 0x5, 0x5, 0xffff]}, 0x5c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = getpgrp(0x0) getpriority(0x0, r2) 19:09:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x179]}) [ 1412.028098] binder: 2519:2522 ioctl 40046207 0 returned -16 [ 1412.098855] binder: BINDER_SET_CONTEXT_MGR already set [ 1412.127263] binder: 2519:2533 ioctl 40046207 0 returned -16 19:09:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair(0x2, 0x805, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:28 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20412ff7e", 0x24}], 0x1}, 0x0) 19:09:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440ff03000005c948eb1093bed620bacc3747e1faeb61bda8bd194e0a91ba3d739c65d4568b4c1110dae314210143ee27eadb8f285a557876b3da7528547992f76bf2d0859a1696eb8dfe92629cf550296d8180d8c92fdb1f1f618efef18744c99cc0e81933737179de5387f0c313a2ea95241fd58afeb20b4a29389724e7dd1dde0700e5f7bba978727bb304bd5911beb85e7b05026b"], 0x0, 0x0, 0x0}) 19:09:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x200000000) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="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", 0xff, 0x0) lseek(r0, 0x0, 0x7) keyctl$get_keyring_id(0x0, r1, 0xac) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 19:09:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x400000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1412.355851] binder: BINDER_SET_CONTEXT_MGR already set 19:09:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x17a]}) [ 1412.376998] binder: 2551:2560 ioctl 40046207 0 returned -16 [ 1412.393508] binder: BINDER_SET_CONTEXT_MGR already set 19:09:28 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20413ff7e", 0x24}], 0x1}, 0x0) 19:09:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400080, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000080)={0x1, r2, 0x10000, 0x6}) fadvise64(r0, 0x0, 0x5, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="aee4351afc6377f6"], 0x0, 0x0, 0x0}) [ 1412.439968] binder: 2556:2562 ioctl 40046207 0 returned -16 19:09:28 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fb620440bc000000635657c9843f0da7c3eeed786551cc23fb4ef404e7cf38ec00c8c81fe033f711875265cbad29474b3ee2a077d260726710be55b82997037c70fc1ced9fd80e5d38177c001cd0bc568487c269b09b45"], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2081000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x10, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video36\x00', 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x7, 0xf, 0x1, "7b7c7d6c635c2bba56b5697e480b46f7ffe23b3e70e619f9aa3ed61f2aaac0de", 0xa0363159}) 19:09:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0x50, &(0x7f0000000040)}, 0x10) 19:09:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x400100, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1412.617017] binder: 2578:2582 unknown command 1074029307 [ 1412.640971] binder: 2577:2581 unknown command 439739566 [ 1412.660534] binder: 2578:2582 ioctl c0306201 20000340 returned -22 19:09:28 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20460ff7e", 0x24}], 0x1}, 0x0) [ 1412.677680] binder: 2577:2581 ioctl c0306201 20000340 returned -22 [ 1412.721237] binder: 2577:2593 unknown command 439739566 [ 1412.726914] binder: BINDER_SET_CONTEXT_MGR already set 19:09:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x17b]}) [ 1412.764822] binder: 2578:2589 unknown command 1074029307 [ 1412.775962] binder: 2577:2593 ioctl c0306201 20000340 returned -22 [ 1412.791634] binder: 2578:2582 ioctl 40046207 0 returned -16 [ 1412.792090] binder: BINDER_SET_CONTEXT_MGR already set 19:09:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x600000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:28 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0xf}], 0x1}, 0x0) [ 1412.828921] binder: 2588:2594 ioctl 40046207 0 returned -16 [ 1412.852944] binder: 2578:2589 ioctl c0306201 20000340 returned -22 19:09:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:28 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x5}, 0x1) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x8}, {r0, 0x201}], 0x2, 0x40) fchmod(r1, 0x2) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/60) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440000031943048d570fb0000"], 0x0, 0x0, 0x0}) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x2) 19:09:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/168) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x186]}) [ 1413.082501] binder: BINDER_SET_CONTEXT_MGR already set 19:09:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14eab64dfdaa7a9d000d5b74a6f6686b6e3d74322509ffc836745053f8e9cc97a66d5564ed9ef2b846552563eb6f2154f563c1e687c1e52a0480e8bacd61c52300a9060ff3f40bfc787346f7aadf537d4e9c84c3567b215f0778e5b22e70fa6051dcd98a9bae153a25cb083cc68f1aa2604468d452a49677dfa40a69a59a1d723c8d127b"], 0x0, 0x0, 0x0}) 19:09:29 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0xc0}], 0x1}, 0x0) 19:09:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x600100, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1413.139147] binder: 2623:2624 ioctl 40046207 0 returned -16 [ 1413.139165] binder: BINDER_SET_CONTEXT_MGR already set [ 1413.168443] binder: 2627:2633 ioctl 40046207 0 returned -16 19:09:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20001, 0x0) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x9, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000380)="a750b30dd21f58145ada573c7be2922d6251eff97676a1e5e6c14f1fa17b7246eb5519eacc460c18efe4215f8c2d78c520db540e7352a8452c7dab8dbc1dcf1df3691e9a1a4f4ff11349e9b9f22a4bc69417f6127b57ef2edc235e28bda6fe846157b319c56f8203c33fcaaec3b49bf3023025c54db50cfa31d964c8c1a921b5658d5447f0520ee81f66693497f968320de603c18762facf4dc1ddb5fcd54d12", 0xa0}, {&(0x7f0000000300)="b079287c6e0304c6d9906063dcd7d242ce5c72786ec367a004f78719f82e", 0x1e, 0xa6}, {&(0x7f0000000440)="21372d36f71e53d535e5df50a1cb43ce90a8c09a705108369312954b3a678b1000023da344ba15fcbdc8f45a6102cc70b3045d4a462297a2cefc8185e4cfb32d9fe7bc77cdc91187e40274f797aec103a5fcddfe97a52b7b9ee5ddc55a41dcc1c2d27ff47e", 0x65, 0x8e8}, {&(0x7f00000004c0)="152b3766aa91b97ab087614b1d80b1dfbc9f9dee92114584ed92d4777058951d19206ad69012f036f4d95552406f243186484858542417e99fed800b2920b95069aacc873379fb3949f0d3a36e4fd7ffcf6b6b2a7eae1f61d70753adf48a378e86ec35d8060191d0ecf2df441e04deea0cd5739326ae854fb5806b2ed4d0435bae738b91bad7ca674ea64d3849059387112e0ace8a40661b12e7af1647ba9c222c7e828699c0b41922671412bca89a93afdfb2a0ebe0bb5f1f6454781af13b06a95848eb136be2cae597c7e9b95f14d9b92b6abbb39c1a9889c9e3b3f3e5f39921d596d1", 0xe4, 0x9}, {&(0x7f00000005c0)="d61c3f174a65dc7033430505701e30b62833c918dd13513ccfeecb99cf366c73bca1a91c903149de7a0bd1366b89913437bd9796d4c65c46eda2a0e464dd01ecaecfadd477b04682bcc6898967d7d9c016a25f10a0a4cd339e713ef05df6b7dd652d89ade7c82ecba8dc42ec4de18e1d504ffc0bf5cfed5fd54919c96fb0c91b9c97ae7c61d94c804ccf187ce9c01acf03a246c284e89037cb473f74f5d1b943aaf88294f7f7a176bcb77f25807349d7279d12c73ca8c7949823d131b829fa0615807b52958b5f8b698a5b471713f1b4d6ef71a46fe1c116f21a5d48c27dd0de7cf5", 0xe2, 0x8000}], 0x800000, &(0x7f0000000800)={[{@check_relaxed='check=relaxed'}, {@norock='norock'}, {@norock='norock'}, {@sbsector={'sbsector', 0x3d, 0x401}}, {@hide='hide'}, {@dmode={'dmode', 0x3d, 0x6}}, {@utf8='utf8'}, {@dmode={'dmode', 0x3d, 0xffffffffffff152d}}, {@nojoliet='nojoliet'}], [{@fsname={'fsname', 0x3d, 'trustedvboxnet1'}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x64, 0x65, 0x35, 0x3f, 0x39, 0x77], 0x2d, [0x65, 0x3f, 0x65, 0x64], 0x2d, [0x37, 0x32, 0x63, 0x77], 0x2d, [0x33, 0x35, 0x36, 0x35], 0x2d, [0x30, 0x38, 0x77, 0x77, 0x32, 0x31, 0x76, 0x39]}}}, {@euid_gt={'euid>', r1}}]}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}}}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563044000000000ab6ec4b82a76668a77d30b69ed931a184ec66aca93b84d22e3c3a05b8ef3dec76919614f6c89bdfbce91df2cdd57f9c76b1121f72b464b0d172ec066e8d6c79d0fd09b"], 0x0, 0x0, 0x0}) 19:09:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x800000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1413.310139] binder: 2642:2644 unknown command 1303833108 [ 1413.327917] binder: 2642:2644 ioctl c0306201 20000340 returned -22 19:09:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$isdn(0x22, 0x3, 0x26) getsockopt(r1, 0xfffffffffffff14e, 0x77fe02f8, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044000df0000"], 0x0, 0x0, 0x0}) 19:09:29 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0xec0}], 0x1}, 0x0) 19:09:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x187]}) [ 1413.386598] binder: 2642:2658 unknown command 1303833108 [ 1413.422637] binder: 2642:2658 ioctl c0306201 20000340 returned -22 [ 1413.476947] binder: BINDER_SET_CONTEXT_MGR already set [ 1413.518325] binder: 2662:2669 ioctl 40046207 0 returned -16 19:09:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 19:09:29 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) fcntl$setstatus(r0, 0x4, 0x40000) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x8, 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) accept$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) 19:09:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="285451dae6ba9f3ab3745d546099dc6f", 0x10) r2 = accept(r1, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000500)="4d384b8bc46e2b1a13071cc8b9e995f3a770dfe7e9d1015be1df343a3f2cf6b6c674efdf613f8d97f5bf06dedd061c8e5c477645c53c0982a603eb2b1b35dbbd30d4d03697767f9909151e72d1395e551b2c9f62581153a41aac2b10496632f7641167d4a4e623b82fea840d91859f030c8a11e59b8b5a91136b677eaf2e0cb0c745d21a60792998c19dd162485f5d6313", 0x91, 0x0, 0x0, 0x0) 19:09:29 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x33fe0}], 0x1}, 0x0) 19:09:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xa00000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1413.760665] binder: BINDER_SET_CONTEXT_MGR already set 19:09:29 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x20000124}], 0x1}, 0x0) 19:09:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x198]}) [ 1413.794838] binder: 2694:2705 ioctl 40046207 0 returned -16 19:09:29 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x1, 0x800}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20081, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:29 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3, 0x2}, @enter_looper, @increfs={0x40046304, 0x1}], 0x1000, 0x0, &(0x7f0000000700)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:29 executing program 2: r0 = gettid() accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) inotify_init1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x1fa4, 0x775c, 0xfffffffffffffffd, 0x7fff, 0x80000001}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) creat(0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) symlink(&(0x7f0000000840)='./file1/../file0\x00', &(0x7f0000000800)='./file1\x00') write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./file1/../file0\x00', 0x0) tkill(r0, 0x1000000000016) 19:09:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc00000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:29 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x7ffff000}], 0x1}, 0x0) [ 1414.033397] binder: 2727:2728 ioctl 4008af10 20000040 returned -22 [ 1414.041623] binder: 2727:2736 ioctl 4008af10 20000040 returned -22 [ 1414.064061] binder: 2729:2731 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 19:09:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40000, 0x0) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x5, 0x401, 0x1, 0x593d, 0x6, 0x6c}, 0x5}, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7ff, 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 19:09:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xe00000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:29 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0xa2800, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) ioctl$TIOCCONS(r2, 0x541d) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000001c0)={0x8, 0x9, 0xc550, 0x6}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x80000001) getresuid(&(0x7f0000000080), 0x0, &(0x7f0000000140)) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 19:09:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x199]}) [ 1414.214547] __nla_parse: 71 callbacks suppressed [ 1414.214555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1414.250929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:09:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b2327a259ec060030fb4000c199"], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipx\x00') ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x80, 0x9}) [ 1414.314223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:30 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0xfffffdef}], 0x1}, 0x0) [ 1414.368127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1414.383374] binder: 2765:2766 unknown command -1574493429 [ 1414.444854] binder: 2765:2766 ioctl c0306201 20000340 returned -22 [ 1414.477665] binder: 2765:2771 unknown command -1574493429 19:09:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1a0]}) 19:09:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563044000800000"], 0x0, 0x0, 0x0}) [ 1414.493552] binder: 2765:2771 ioctl c0306201 20000340 returned -22 [ 1414.500058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1414.515712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1414.593776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1414.626677] binder_thread_write: 13 callbacks suppressed [ 1414.626689] binder: 2784:2786 Acquire 1 refcount change on invalid ref 32768 ret -22 [ 1414.703924] binder: 2784:2791 Acquire 1 refcount change on invalid ref 32768 ret -22 [ 1414.808173] binder: BINDER_SET_CONTEXT_MGR already set [ 1414.813565] binder: 2729:2742 ioctl 40046207 0 returned -16 [ 1414.819690] binder: 2729:2794 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1414.827558] binder: 2729:2794 IncRefs 0 refcount change on invalid ref 1 ret -22 19:09:30 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000200), 0x0, 0x100f}}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563d355023c2e22"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000100)=""/6) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e21, @multicast1}}) 19:09:30 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x2}, 0x0) 19:09:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r0, &(0x7f0000000180), 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 19:09:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xf40100, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1c0]}) 19:09:30 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x100ffc, 0x0) ioctl$TIOCCONS(r0, 0x541d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r0, 0x8, 0x1}, 0x14) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getuid() mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x10002, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client='access=client'}, {@privport='privport'}, {@nodevmap='nodevmap'}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r2}}]}}) r3 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05630440000000001f17fc9b2e55bf7f9051c48fc1fc28fb83fa7ed0f181746808d74e095fc89b86af6e3f61d2c9dc59b0369974c2eaa5c1e3924199507a704b34433cf79b339b9aaa43fdb8a5c55e0081f729752f910de742a3409de00485a30d48c8f2263742e56904a2eb08ed3f878cfe4d0be54711348b5d858a0e1e134d4e03f7b8a12998c00a9931d4ee818ac1381e608e87e92f8635e165bb08111a5bfac1af01488a72ad104039f4054bc671a9b53d9ceb8580945c4d0a72f89ccab2e00f4ec8f1a67545af4f924244b7e8982e0000000000009e6584"], 0x0, 0x0, 0x0}) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000200)={0x2, 0x5, 0x7fff, 0x2d9, 0x6, 0xeb8}) 19:09:30 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x8, 0x0, r0, 0x7}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) geteuid() ioctl$VT_RELDISP(r2, 0x5605) io_submit(0x0, 0x1, &(0x7f0000000200)=[0x0]) getuid() readv(r1, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/24, 0x18}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/208, 0xd0}], 0xa) getpeername$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x76) pipe(&(0x7f00000004c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000d80)=""/201) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) [ 1414.988720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1414.989230] binder: 2799:2801 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1415.018621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1415.036806] binder: 2806:2810 unknown command 1439916805 19:09:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x18100) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x10, 0x100, 0xffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1415.061534] binder: 2806:2810 ioctl c0306201 20000340 returned -22 [ 1415.069967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1d9]}) [ 1415.124745] binder: 2806:2810 ioctl 4b4a 20000100 returned -22 [ 1415.131590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1415.150364] binder: BINDER_SET_CONTEXT_MGR already set [ 1415.174727] binder: 2806:2819 ioctl 40046207 0 returned -16 19:09:31 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x8}, 0x0) [ 1415.216142] binder: 2806:2810 unknown command 1439916805 [ 1415.252874] binder: 2806:2810 ioctl c0306201 20000340 returned -22 19:09:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x1000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x20000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1415.275182] binder: 2806:2819 ioctl 4b4a 20000100 returned -22 19:09:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x40}], 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:31 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x8, 0x0, r0, 0x7}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) geteuid() ioctl$VT_RELDISP(r2, 0x5605) io_submit(0x0, 0x1, &(0x7f0000000200)=[0x0]) getuid() readv(r1, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/24, 0x18}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/208, 0xd0}], 0xa) getpeername$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x76) pipe(&(0x7f00000004c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000d80)=""/201) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) 19:09:31 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x300}, 0x0) [ 1415.414625] binder: 2844:2849 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1db]}) 19:09:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x2000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1415.472364] binder: BINDER_SET_CONTEXT_MGR already set 19:09:31 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x8, 0x0, r0, 0x7}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) geteuid() ioctl$VT_RELDISP(r2, 0x5605) io_submit(0x0, 0x1, &(0x7f0000000200)=[0x0]) getuid() readv(r1, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/24, 0x18}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/208, 0xd0}], 0xa) getpeername$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x76) pipe(&(0x7f00000004c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000d80)=""/201) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) 19:09:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 19:09:31 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0xffffff1f}, 0x0) [ 1415.553683] binder: 2848:2853 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1415.581459] binder: 2848:2859 ioctl 40046207 0 returned -16 19:09:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x2010000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x8}, 0x20) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="3512c654c1c643d1"], 0x0, 0x0, 0x0}) 19:09:31 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x8, 0x0, r0, 0x7}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) geteuid() ioctl$VT_RELDISP(r2, 0x5605) io_submit(0x0, 0x1, &(0x7f0000000200)=[0x0]) getuid() readv(r1, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/24, 0x18}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/208, 0xd0}], 0xa) getpeername$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x76) pipe(&(0x7f00000004c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000d80)=""/201) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) 19:09:31 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x2}, 0x0) 19:09:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1de]}) 19:09:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x3000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1415.785470] binder: 2887:2893 unknown command 1422266933 19:09:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_security(0x11, r1, &(0x7f0000001700)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1415.833202] binder: 2887:2893 ioctl c0306201 20000340 returned -22 [ 1415.890157] binder: BINDER_SET_CONTEXT_MGR already set 19:09:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x4000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sysinfo(0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0xffffffff80000801) ioctl(0xffffffffffffffff, 0x4161, 0x0) [ 1415.917019] binder: 2887:2905 ioctl 40046207 0 returned -16 [ 1415.942526] binder: 2887:2893 unknown command 1422266933 19:09:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x446000) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)) 19:09:31 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x3}, 0x0) [ 1415.983862] binder: 2887:2893 ioctl c0306201 20000340 returned -22 19:09:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x2ff]}) 19:09:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1416.099162] binder: 2916:2921 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:32 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x4}, 0x0) [ 1416.168963] binder: BINDER_SET_CONTEXT_MGR already set 19:09:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xfc03, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1416.194121] binder: 2926:2931 ioctl 40046207 0 returned -16 [ 1416.223829] binder: 2926:2930 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x100000001, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x3800000000}, 0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) shmget(0x3, 0x1000, 0x78000054, &(0x7f0000ffc000/0x1000)=nil) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000280)='bpf\x00', 0x3, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8a00, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x47f]}) 19:09:32 executing program 2: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568041baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:32 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x5}, 0x0) [ 1416.439904] binder: BINDER_SET_CONTEXT_MGR already set [ 1416.478831] binder: 2950:2955 ioctl 40046207 0 returned -16 19:09:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0789f3e8da85c777"], 0x0, 0x0, 0x0}) [ 1416.554602] binder: 2946:2956 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x480]}) 19:09:32 executing program 2: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568041baba20400ff7e", 0x24}], 0x1}, 0x0) 19:09:32 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x6}, 0x0) [ 1416.735856] Unknown ioctl 21538 [ 1416.739545] binder: 2969:2976 unknown command -386692857 [ 1416.768371] binder: 2969:2976 ioctl c0306201 20000340 returned -22 [ 1416.995357] Unknown ioctl 21538 [ 1416.998978] binder: BINDER_SET_CONTEXT_MGR already set [ 1417.009606] binder: 2969:2970 ioctl 40046207 0 returned -16 [ 1417.019934] binder: 2969:2970 unknown command -386692857 [ 1417.028785] binder: 2969:2970 ioctl c0306201 20000340 returned -22 19:09:33 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x8}, 0x0) 19:09:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x6000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4840c1, 0x0) sendmmsg$alg(r1, &(0x7f00000013c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="9e0e662ad613d9245b99dfbb7eea0d8c4110e95e6f07ac7e43214ccefc842e9bb11e222af552317dffb532619d321e69c47fc58a3368c9b57fbd019539697c7f58df0f0dad0eebe3436f28a461a440", 0x4f}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000008000000000000000170100000200000067000000d51df0f66c2b697ea458c45d5b0241828395a33e30048ca03d1d5f120b42103e23670d46a08429c45ab7755edb87523dc7c81ae263ab41e7bc60d1ad8b24f727e00cbd1ae01b63ba285dde50be83eb2003534e709c5a2594c8f82d91a853cd81839a464ffee1f4000000000018010000000000001701000002000000fe0000003f9c1a1d1400ac302a8c286a00cb524f643d00d09f29ae52de84124a9ce9543247ad15f4712aecf2a918095f678159c841fbe78352fb1be3cbc53448e503d5f21142b3fc36e298e574ad39cd7775a209b8a7f15cd272ff822f5171dc9ba309f16dd25b101d18192ede97b1a778a817a1378b812abb8240fcc60f42a69d46bec8f049974ba68c8c1b04cbc2a059c8a31031113fb79cb506fedc579feeb4a9efbf908f96061f11c1679df7b05bd4ff55a08e28fc836d7f4855c06d45483dfb5e0cb17ca6f4aecc7daefa859118970adf1d6a75a36ccf79089afa755399144d559a01c600c229e661af5fbfd2c9afe1f831ea671255a037caa6fec5b10000000000001800000000000000170100000400000029ab000000000000000000"], 0x1c8, 0x8000}, {0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d0b7aeb47805430fe5a5f075b8baec08176ba90f41d0c550c489e990ba59c73dee3f6bc824aec3e327586a0b28ebe9bdde7e61cacfc5b73f4cf7b30f4460f24186890b18d468d04e5bafa159363842808784308cf02860e3dd25798b4d13931f9416c80e8b1ef047465f63a4a91e73d4496d4b5e574b3c2af75768d80ee1f90cb5c1a1bb070cf52b9a812fa2d67a7e233cf0ec8f29c529f617e7", 0x9a}], 0x1, &(0x7f0000000580)=[@assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf8, 0x117, 0x2, 0xe0, "89c8ed028d51ff0bd3efc52ea1d743c71b4aa0ad12f27b1c0e47b610702e245dbd0832a0047a4d4f450ed647ad6b837014e98145b46450a2989daa8329ff0451a6cbea3c475339bc8e466a54d723cd6de42f611eba03cf294f151e78ee5ef97fe8219b457466790f2f923606b5cd0b29c7099cb79f774ddac4f6ce0669b0d10dde6a05f47582251b3ffdeeb445b2173298f5c531bcb3e1eb6f26b497514952859bf6940418d1f18122a3282cd5150078e7d80c5a018b91e4c584002b1ad7b2c26138c3273667c666412bbc80b50ae3f15e68c20b2b783b164555cebe52671ff5"}, @assoc={0x18, 0x117, 0x4, 0x6d5f}], 0x140, 0x4000000}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="bafd194c1d87dbe3e149629bc4ab25695917614aa4245be3676ea9334ee9a0783b6f66aba4f33697541981b0e2d409d65df03ef4d0ba6b66a6925c9dfd49292880a88c68a78a7e", 0x47}, {&(0x7f0000000700)="73fdb36960c7b3d736efa323e0322fa3ca94eb67a1495627be3c9df3c8e58ac9d8d31f798ddb29789e1a180f80a5f509cc446c0df3057a3a324f5384e385d2ff0580bd68059f1ba2b105f4114ea1c4b9f7edca5f31ccb133b4d56db3108351538feb1058158f2b0f8ae387f1ebc6d8d6ef28c4ebd39cb7a5a0c5b3a1a830d71b2e70e4faa6695d90c74709a2fc8ed4c6d0f16a9c3cabf1f21def735606d10a506b4498323b5b6a91aef5e956b9770f24947692b317a8ccd011b0543d7529114a06c139008a41", 0xc6}, {&(0x7f0000000140)="5bcca40b0c70d272c27fa2d19ff4a62bf569393a23f2f28d9a7b9448031ce58ed97fee6181f5ac65bedad92b72ae6cd23700867c0c21", 0x36}], 0x3, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000840)="230a8be47b6befae8b9cf4cb519b8e5a7369dcb42f3fbf4ad88556ccf1693759b40f3ba9c6b7abb96aaf16e795d77bd68a9195351ec85b057afa69c9cafc381a3eac9da2c9f15b1aac70032e7cef206156155597a9ec", 0x56}, {&(0x7f00000008c0)="f7f11c06fdb6ee7b070f2a4156eda62bb2b87d3c45f04ac98eb2b04000e550c54d2144d4f537fd19073ec3d03b66ddd1fb7b0ec2af06142f3e94e467f25cdb3081c3787aa6b0e6679f158e9504c0be961d5bcacb31219c4d62d6d4c6df2ba776ddc9174f0d3cd0e9e3a1d55f18523d1f1bc2b2e8624efbf1c1ecb16a900c9cec4975420309621cdc93bcd07b66e073a7987d6cf3b1c6281007149533b650b4ffccddcf96b8236c7e88231e7ef2aa1398442c68df8556e4a3409266c85db4514a50471a34aab3f0a5178d389896ae687e266ef7452cd99d05580372401bd12c694d8320", 0xe3}, {&(0x7f00000009c0)="b9ca5a4c009bc45ab7a3774492f24ba4c582e6371c024eb8ce1760da64f530c65750fa3836cad99015dcce5e93655d24742a18fbd710cb1fc6794a2c455866bd8f64e19d32563609b195315a154a4f2f6a4c6c8b2248a33a6c5d8f6381adde52b81a244fe2862cab54c8fae1f4442cda64bbd5522511e7584faaa6757159f640ac7fd453c29b9eb61acf3ac99cb307b3dd969d844906363480ae0416691c46f21542fb64e83f3f57dd8d57e5b1edf5fc800b4fe9c3a185b74bb73fcab9c85e42741df95ecd0d43db", 0xc8}], 0x3, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b00)="1cd2c69847903cb0d4d145b6a980768d3f6fe59e72382f2714caf318b92851dee60e50c75b8b883b03fabab7fa61126876854764", 0x34}], 0x1, &(0x7f0000000b80)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4048000}, {0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000bc0)="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", 0xfa}, {&(0x7f0000000cc0)="44e9c803c814bd67b5d9dd2314e95fbbb7d00a3e35d4ed9442a1", 0x1a}, {&(0x7f0000000d00)="7492103c444794b1265fd7b3752f514d6547fd24f2a28e0a29e07cd63abc3287d801de60e8eed7f9b0efb4e68e08a26df9b2805669dffaf090ed71b647ec544f0511a3cc72d447b7c5b310372590a306a786d25fe8505da94d7d44166f446e67a110", 0x62}, {&(0x7f0000000d80)="07ce2ea87d1974d9a5ebd864dbcbcc3184adc207c8edc156503970f7a9f9bfd97195e0aac0b86bda7546a2ba66f886f0e3824045138c3202973a7146ef6720b1eef4de84638c2b9579652ab669c36353ba8c8b905dd7b692ca0f9c07ae5ce6197c60e3019f730c0dbf63b214608f865d6273563bf9ec1e9c507d5c668051e687b66e9e3b300cac36a71dcd5828bef628145984be8c21f0eaf5b0e9ad30eff768a5dc83eb7d6e0acfe1b5ee00e7cb3f63581187cadf8828925b3ea215c1d2855ff59d49c224", 0xc5}, {&(0x7f0000000e80)="b04179ebcd37a697d333ffa9425c13807fd38236066ff350724b09ff7cab147e18fa1f018d04a010dce073e4c5379b71e5bd536e1d0ff6c78383f8f94b1afb", 0x3f}, {&(0x7f0000000ec0)="2f2930cce4263b9700efc65156bbfa9e02945f8d084fde83a9e8194b572f6d3a48c50b4db6a7b6d352c01b8ef814a8e5029c89396c153b9e9a28370ea7876e623a05c3eff5a3b35119913baecd34d0aaeabf78eab2dfbbac0b292249db82779f70f28c1b71ec96a573bc19c2cf2e6096447ef0fca90ebcb342b69397c882bc725bdb2ee29534efca78342619073d0d9bebf20560a947ea080254c142556202b4580f5ecabd53343c5fb105", 0xab}, {&(0x7f0000000f80)="1d0dd63e2f67a05bd4e21d7eecfbcd5504ff1d6e44fdd1b5337604f82ce6ccb1af3b5cf40612216e9b9c47bd11f835f1a494bce2f2bd3ffd8fa71ff793be4c59877a6fb211c948e7a58e06d3bb78adcac232229a6c410199558eadd8752154b8227b84310890b4d2fe3547f0a3acdf5e5e68", 0x72}, {&(0x7f0000001000)="b5f6e74ace14975acf934384bd3f5a68d8bf8bef6e", 0x15}, {&(0x7f0000001040)="52b388b8ae8c886ee821bd73e5ec176d4e7eecf5d6034b645eb4fd71e1fa97aaaf87721fa80ec68a441c368d7eb3d317e49f2bbce79719eb4cf4e38176503374859d44750350ab7677ec8d91fdf95543c69a60bd2db94b434e938329ce4edcc151af80a2385255b569b364d476995f2b77d41f729ebc076c44e339b4173dff251183a9d6d02236cdb6c402ce2a1e176b0a981ed360659dbf2a848823d1b13404d81c73ce7d9384b3fc3a36c81f5ad4de01e32ba18d41edd2e925e4d913939d659e8e2d0f767b577d512da1f92d58e65ce3", 0xd1}], 0x9, &(0x7f0000001200)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x5, "fa9c675169"}, @op={0x18}], 0x68, 0x4}, {0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001280)="e19f9e240806693353cd90426e4eab3ea3bfcc5e09e89c6b62525d3c6cc399450b1caa9865afa5406bde3732693e72972500", 0x32}, {&(0x7f00000012c0)="85f09471d1c0e8006b8211213c6e539294faba3667cd1f6e130d6505aca367a1f3abb6d3376cc16c99452a789fd9e4e38c282c2b253164ea4d08c2f7337c3a39f147d5435f898a8e", 0x48}, {&(0x7f0000001340)="8df7ca3f67496f11df9fbba806fa4cbfe2914823dd307adf27d457c1f440e3401b4e123277c481b611e1b2", 0x2b}], 0x3, 0x0, 0x0, 0x40}], 0x7, 0x800) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7) 19:09:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x491]}) 19:09:33 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400000, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x2000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x600}}, {@blksize={'blksize'}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xe00}}, {@allow_other='allow_other'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, 0x5, {0x7, 0x1c, 0x0, 0x204042, 0xfffffffffffffffc, 0x2, 0x6, 0xfffffffffffffffd}}, 0x50) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x5, 0x4, [0x800]}) [ 1417.498484] binder: 2990:2995 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1417.522152] binder: BINDER_SET_CONTEXT_MGR already set 19:09:33 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x9}, 0x0) [ 1417.552215] binder: 2991:2999 ioctl 40046207 0 returned -16 [ 1417.552372] binder: BINDER_SET_CONTEXT_MGR already set [ 1417.580833] binder: 2994:3000 ioctl 40046207 0 returned -16 19:09:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d8f310e0191809f4"], 0x0, 0x0, 0x0}) 19:09:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x4d0]}) 19:09:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r1, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1417.721764] binder: 3013:3017 unknown command -535759912 [ 1417.757533] binder: 3013:3017 ioctl c0306201 20000340 returned -22 19:09:33 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xa}, 0x0) [ 1417.798232] IPVS: ftp: loaded support on port[0] = 21 [ 1417.808330] binder: BINDER_SET_CONTEXT_MGR already set [ 1417.838539] binder: 3013:3024 ioctl 40046207 0 returned -16 [ 1417.863103] binder: 3013:3017 unknown command -535759912 [ 1417.871603] binder: BINDER_SET_CONTEXT_MGR already set [ 1417.880713] binder: 3013:3017 ioctl c0306201 20000340 returned -22 19:09:33 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x100000000, 0x8, 0x4, 0x20000000, {0x77359400}, {0x2, 0xd, 0x1, 0x6, 0x0, 0x5, "bde2ad1a"}, 0x7fffffff, 0x2, @offset=0x3ff, 0x4}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000000101005, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0xd90, 0xf1, 0x9}) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) sendfile(r3, r2, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140), 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0563144000000000"], 0x0, 0x0, 0x0}) [ 1417.901384] binder: 3026:3030 ioctl 40046207 0 returned -16 [ 1417.992652] binder: 3037:3038 unknown command 1075077893 [ 1418.021872] binder: 3037:3038 ioctl c0306201 20000340 returned -22 [ 1418.062429] binder: 3037:3041 unknown command 1075077893 [ 1418.068176] binder: 3037:3041 ioctl c0306201 20000340 returned -22 [ 1418.118698] device bridge_slave_1 left promiscuous mode [ 1418.129453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.168271] device bridge_slave_0 left promiscuous mode [ 1418.173820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.279364] device hsr_slave_1 left promiscuous mode [ 1418.337388] device hsr_slave_0 left promiscuous mode [ 1418.405861] team0 (unregistering): Port device team_slave_1 removed [ 1418.417576] team0 (unregistering): Port device team_slave_0 removed [ 1418.427546] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1418.467434] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1418.550741] bond0 (unregistering): Released all slaves [ 1418.690537] chnl_net:caif_netlink_parms(): no params data found [ 1418.718306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.724728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.731540] device bridge_slave_0 entered promiscuous mode [ 1418.738240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.744782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.751571] device bridge_slave_1 entered promiscuous mode [ 1418.765201] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1418.774417] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1418.789154] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1418.796277] team0: Port device team_slave_0 added [ 1418.801592] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1418.808876] team0: Port device team_slave_1 added [ 1418.814156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1418.821331] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1418.895209] device hsr_slave_0 entered promiscuous mode [ 1418.962862] device hsr_slave_1 entered promiscuous mode [ 1419.043070] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1419.050022] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1419.065575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.072014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.078653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.085011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.171975] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1419.178144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.186907] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1419.195159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1419.202229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.209701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.217705] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1419.235439] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1419.241500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.257413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1419.269805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.276190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.309860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1419.318526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.324902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.337972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1419.346735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1419.358934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1419.370823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1419.387571] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1419.395523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1419.406772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1419.415947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1419.431905] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1419.450365] 8021q: adding VLAN 0 to HW filter on device batadv0 19:09:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x7000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:35 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xb}, 0x0) 19:09:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="011a1437fafdf3ff"], 0x0, 0x0, 0x0}) 19:09:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x560]}) 19:09:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x185000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x2, 0xfff}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x2, @empty, 0x8001}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="b05a077403cc72bcca064cff9fe061dc681513cc25de3464d4a5e7fdce56bf99e5c47dd2a19ae25b4e2046c031160f3fd82bbd5250747f133e857a445f581029db3036a65f0b51a3b95a036d7a748f790350939e61157d73ea3e67da190d8d7f6713802a141f3c10dacd7d3b73e443103276b6478b735dd1f83391bcb5aa30877abe6dd418894a1ba91afddaf3fbda79d81df4d8fa19b548320e687cbd9ba992", 0xa0}], 0x1, &(0x7f0000000380)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x1, 0xfff, 0x80, r4}}, @init={0x18, 0x84, 0x0, {0x0, 0x0, 0xf97, 0x4}}, @init={0x18, 0x84, 0x0, {0x1000, 0x1, 0x100, 0x200}}, @init={0x18, 0x84, 0x0, {0x9, 0x4, 0x7, 0xfff}}, @init={0x18, 0x84, 0x0, {0x3, 0x1000, 0x8000, 0xd5f3}}], 0x80, 0x40}, 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x13f, 0x17a, 0x4, 0x8}, 0x10) sendfile(r0, r0, &(0x7f0000000000), 0x7123) 19:09:35 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000140)={0x3, 0x7, 0x3, 0x3, 'syz1\x00', 0x1000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630450000000006ae39972ff0f80e9f14ca90000132b54d04f2d66fc6bf82fd86f96276d4616b4551200e2a9394d0b233d104ce9d3ede88ca2c8acf5f2e0bb6f22"], 0x0, 0x0, 0x0}) dup(r3) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) [ 1419.550080] __nla_parse: 27 callbacks suppressed [ 1419.550087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1419.670781] binder: 3057:3058 unknown command 1342464773 [ 1419.671182] binder: 3053:3059 unknown command 924064257 [ 1419.677456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1419.693357] binder: 3053:3059 ioctl c0306201 20000340 returned -22 19:09:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc401, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1419.716573] binder: BINDER_SET_CONTEXT_MGR already set [ 1419.722903] binder: 3057:3058 ioctl c0306201 20000340 returned -22 [ 1419.752086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1419.762017] binder: 3057:3069 unknown command 1342464773 [ 1419.769304] binder: 3053:3068 ioctl 40046207 0 returned -16 19:09:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x8000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1419.792608] binder: 3057:3069 ioctl c0306201 20000340 returned -22 19:09:35 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xe}, 0x0) 19:09:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x561]}) 19:09:35 executing program 3: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0xfffffffffffffe0a, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x3, "184ccb66f3a5764fd9598ecb1a67b96bd6259213a5129894a2fceac45bbf7b30", 0x2, 0x1}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0) [ 1419.957094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 1419.985031] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1420.002016] binder: BINDER_SET_CONTEXT_MGR already set [ 1420.007854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1420.036937] binder: 3088:3104 ioctl 40046207 0 returned -16 [ 1420.046557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000012}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1420.058006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x9000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:35 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYPTR64, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESOCT=r0], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR, @ANYRES64=r0, @ANYPTR, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=0x0, @ANYPTR], @ANYRES16=r0]], 0x0, 0x0, 0x0}) 19:09:35 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xf}, 0x0) 19:09:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffffffffffffff95, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x1, {0x77359400}, 0x3f, 0x6}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) [ 1420.223650] binder: BINDER_SET_CONTEXT_MGR already set [ 1420.230909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1420.256964] binder: 3118:3126 ioctl 40046207 0 returned -16 [ 1420.272286] binder: 3118:3135 unknown command 536871552 [ 1420.278512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1420.280509] binder: 3118:3135 ioctl c0306201 20000040 returned -22 [ 1420.302680] binder_thread_write: 2 callbacks suppressed [ 1420.302692] binder: 3131:3134 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1420.311692] binder: 3118:3126 unknown command 536871552 19:09:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mkdir(0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', 'upperdir'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f0000000080)=[@register_looper, @request_death={0x400c630e, 0x4, 0x2}, @dead_binder_done={0x40086310, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000000)=[@fda={0x66646185, 0x8, 0x0, 0x37}, @fda={0x66646185, 0x3, 0x1, 0x9}], &(0x7f0000000040)=[0x20, 0x40]}}, @acquire={0x40046305, 0x4}], 0xa5, 0x0, &(0x7f0000000200)="7084c0e3cca96a57678a751f309d717cebb6005a1d7955c588c8552f4bba051659b245a7fbac225e6abcf33d8e25da44a78c08f41122b80afc00a53be41509c7c0d7baeef4e89a54a89e670f5e4613ce125e94209957b6b9deec68fa2e51da0b7926baaa94862c29c0d9a6ebacb0ab7b102cc9182bdd96706efc8e7dd960b3787d3f3db5460b2fcf3c0f8928a177717f4f29619be8a1bb0d9346446027d01c2e951d33d382"}) 19:09:36 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x10}, 0x0) [ 1420.330442] binder: 3118:3126 ioctl c0306201 20000040 returned -22 19:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x570]}) 19:09:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xa000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:36 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'rr\x00', 0x8, 0x0, 0x64}, {@loopback, 0x4e20, 0x6, 0x0, 0x7fffffff}}, 0x44) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) [ 1420.421381] binder: 3131:3137 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:36 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x11}, 0x0) 19:09:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1240000000000001"], 0x0, 0x0, 0x0}) [ 1420.568353] binder: BINDER_SET_CONTEXT_MGR already set [ 1420.603961] binder: 3157:3163 ioctl 40046207 0 returned -16 19:09:36 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x12}, 0x0) [ 1420.646690] binder: BINDER_SET_CONTEXT_MGR already set [ 1420.686378] binder: 3157:3174 ioctl 40046207 0 returned -16 [ 1420.693612] binder: 3151:3153 ERROR: BC_REGISTER_LOOPER called without request 19:09:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xb000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x571]}) [ 1420.733218] binder: 3176:3177 unknown command 16402 [ 1420.738566] binder: 3151:3153 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 1420.760565] binder: 3176:3177 ioctl c0306201 20000340 returned -22 [ 1420.770521] binder: 3151:3153 BC_DEAD_BINDER_DONE 0000000000000002 not found 19:09:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) [ 1420.801589] binder: 3151:3153 got transaction to context manager from process owning it [ 1420.832901] binder: 3176:3186 unknown command 16402 [ 1420.834459] binder: 3151:3153 transaction failed 29201/-22, size 64-16 line 2887 [ 1420.840603] binder: 3176:3186 ioctl c0306201 20000340 returned -22 19:09:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:36 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x13}, 0x0) 19:09:36 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000240)={0x2d, 0x20000800, 0x1000, 0x9, 0xffffffff, 0x7, 0x3, 0x10000, 0x1f, 0x1}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xffffffffffffffff, 0x0) getsockname$tipc(r1, &(0x7f0000000100), &(0x7f0000000140)=0xfffffffffffffe06) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000002c0)={0x0, &(0x7f0000000040)}) 19:09:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xc010000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x572]}) 19:09:37 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x60}, 0x0) 19:09:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) personality(0x2000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xd000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:37 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x300}, 0x0) 19:09:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x580]}) [ 1421.524644] binder: 3265:3268 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7f, 0x50000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x7, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="46630240eeb790041b24baeb1d1ca0df87f013f4061788a2f01053b35b92b8a298455caf611ac30c852a4195d5557ece2e9c0e6d0c537f9cbad895945243bef194aff245656bc40400e51ce33d482a71ce07118d937106c17fe4d49f31c5709b1086520386d20093369e3015a93e46b5f834f471be745f13d97a573a5d0fcaa18e424500164de991d9516e664f4794681daef99311e87094e612"], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x20, 0x7}, 0x4) 19:09:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:37 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x500}, 0x0) [ 1421.770927] binder: 3286:3288 unknown command 1073898310 19:09:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xe000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1421.829030] binder: 3286:3288 ioctl c0306201 20000340 returned -22 [ 1421.868174] binder: 3286:3306 unknown command 1073898310 19:09:37 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x600}, 0x0) [ 1421.916651] binder: 3286:3306 ioctl c0306201 20000340 returned -22 19:09:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x587]}) 19:09:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xf000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:38 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x900}, 0x0) 19:09:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) [ 1422.212494] binder: 3335:3340 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:38 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xa00}, 0x0) [ 1422.320807] binder: 3335:3340 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x6e0]}) 19:09:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:38 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xb00}, 0x0) 19:09:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x10000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:38 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x2, 0x42002) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000440)={0x8}) r3 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="900563ed15b30440"], 0x325, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) ptrace$getenv(0x4201, r1, 0x81, &(0x7f00000003c0)) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000380)={0x100000000, 0x81, 0x1, 0x1f, 0x1, 0x80, 0x2, 0x200, 0x5, 0x81}) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000200)={0x3, @default, r5}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r6}}, 0xc) 19:09:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) [ 1422.731180] binder: 3376:3379 unknown command -312277616 19:09:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) [ 1422.774585] binder: 3376:3379 ioctl c0306201 20000340 returned -22 19:09:38 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xe00}, 0x0) [ 1422.820963] binder: 3376:3379 unknown command -312277616 19:09:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x10020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xa01]}) [ 1422.862817] binder: 3376:3379 ioctl c0306201 20000340 returned -22 19:09:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:38 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xf00}, 0x0) 19:09:38 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x7fff, 0x1, 0x5, 0x7fff, 0x9}, 0x14) r3 = syz_open_dev$radio(0xfffffffffffffffe, 0x2, 0x2) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000000)) 19:09:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) [ 1423.094639] binder: 3408:3410 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x11000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1423.193758] binder: 3408:3410 ioctl 80247008 20000000 returned -22 19:09:39 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x1100}, 0x0) 19:09:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xbff]}) 19:09:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) [ 1423.270655] binder: 3408:3427 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x12000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:39 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0104000000000000"], 0x275, 0x0, 0x0}) 19:09:39 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x1200}, 0x0) [ 1423.518138] binder: 3450:3451 unknown command 1025 19:09:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) [ 1423.590692] binder: 3450:3451 ioctl c0306201 20000100 returned -22 19:09:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xd90]}) 19:09:39 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x1300}, 0x0) [ 1423.662214] binder: 3450:3451 unknown command 1025 [ 1423.678975] binder: 3450:3451 ioctl c0306201 20000100 returned -22 19:09:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="65962e208a53d28b6a82092b5b0961f216033b048400a523ff2d1cf43703236617f8f5ab7bad593368882daf5e8d5e104983ed68cff16c9fe607881fcba58afcd1f0dce82f616e0a708651c9f4ea122402c463dcbce363d2fa316769e96667202200c5e7607ee1ffe3be", 0x6a, 0x0) keyctl$read(0xb, r0, &(0x7f0000000100)=""/82, 0x52) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000240)={0x2, 0x4000, 0x8001, 0xea, 0x9}) 19:09:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x13000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:39 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x6000}, 0x0) 19:09:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:39 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x1000000}, 0x0) 19:09:39 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="054dc1b863044000"], 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 19:09:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0xda0]}) 19:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) [ 1424.154763] binder: 3504:3507 unknown command -1195291387 [ 1424.182266] binder: 3504:3507 ioctl c0306201 20000000 returned -22 19:09:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x14000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:40 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x2000000}, 0x0) 19:09:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8100, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x6, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) 19:09:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x15000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1100]}) [ 1424.415265] binder: 3531:3532 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:40 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x3000000}, 0x0) [ 1424.490857] binder: 3531:3539 Acquire 1 refcount change on invalid ref 0 ret -22 19:09:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0xe000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:40 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x4000000}, 0x0) [ 1424.624481] __nla_parse: 57 callbacks suppressed [ 1424.624490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1424.648693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1424.662114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) [ 1424.837667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1424.849520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1200]}) 19:09:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x16020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1424.896616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 1424.933579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:40 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x5000000}, 0x0) [ 1425.137764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x18000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:41 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1700]}) [ 1425.211064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) [ 1425.299331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x1b020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:41 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1b00]}) 19:09:41 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:41 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x6000000}, 0x0) 19:09:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x1c020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:41 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x8000000}, 0x0) 19:09:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x1e01]}) 19:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x1f000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:41 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x9000000}, 0x0) 19:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:42 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xa000000}, 0x0) 19:09:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x20020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x2a00]}) 19:09:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x28030000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:42 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xb000000}, 0x0) 19:09:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x2a020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:42 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xe000000}, 0x0) 19:09:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x2c010000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x2c00]}) 19:09:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:42 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xf000000}, 0x0) 19:09:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x2c020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:42 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x10000000}, 0x0) 19:09:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x3400]}) 19:09:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:43 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x11000000}, 0x0) 19:09:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x3a00]}) 19:09:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x30000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x3b00]}) 19:09:44 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x12000000}, 0x0) 19:09:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:44 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:44 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x13000000}, 0x0) 19:09:44 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x60000000}, 0x0) 19:09:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:44 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) [ 1428.708703] IPVS: ftp: loaded support on port[0] = 21 [ 1428.945603] chnl_net:caif_netlink_parms(): no params data found [ 1428.972942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.979407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.986789] device bridge_slave_0 entered promiscuous mode [ 1428.998953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.005414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.012297] device bridge_slave_1 entered promiscuous mode [ 1429.030301] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1429.039323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1429.061149] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1429.068374] team0: Port device team_slave_0 added [ 1429.074045] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1429.081167] team0: Port device team_slave_1 added [ 1429.086568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1429.094010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1429.134842] device hsr_slave_0 entered promiscuous mode [ 1429.183002] device hsr_slave_1 entered promiscuous mode [ 1429.253261] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1429.264027] device bridge_slave_1 left promiscuous mode [ 1429.270065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.343382] device bridge_slave_0 left promiscuous mode [ 1429.348857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.545177] device hsr_slave_1 left promiscuous mode [ 1429.598113] device hsr_slave_0 left promiscuous mode [ 1429.638263] team0 (unregistering): Port device team_slave_1 removed [ 1429.649531] team0 (unregistering): Port device team_slave_0 removed [ 1429.661437] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1429.699813] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1429.781928] bond0 (unregistering): Released all slaves [ 1429.887060] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1429.905233] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1429.940639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.949319] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1429.958461] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1429.966031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1429.973357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1429.982410] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1429.989010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.998229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1430.006079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1430.006564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1430.021390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.027790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.039326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1430.047921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1430.055632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1430.063862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1430.071417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.077829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.087206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1430.097648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1430.104828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1430.105559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1430.122250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1430.129567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1430.137867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1430.145871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1430.155777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1430.163425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1430.171293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1430.181360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1430.191280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1430.198663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1430.207321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1430.215101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1430.222814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1430.232304] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1430.238604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1430.288774] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1430.310177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.450894] __nla_parse: 28 callbacks suppressed [ 1430.450902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x33020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x4001]}) 19:09:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:46 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xf5ffffff}, 0x0) 19:09:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) [ 1430.535901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1430.643099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) [ 1430.706057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) [ 1430.789647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:46 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xfcffffff}, 0x0) 19:09:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x4800]}) [ 1430.966904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1430.983197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) [ 1431.023424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x34000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:46 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xffffff7f}, 0x0) 19:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x6005]}) [ 1431.283202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1431.296517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x34010000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:47 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xfffffff5}, 0x0) 19:09:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x34020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x6105]}) 19:09:47 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xfffffffc}, 0x0) 19:09:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x3a000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:47 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x100000000000000}, 0x0) 19:09:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7005]}) 19:09:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:47 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x200000000000000}, 0x0) 19:09:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x3a020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:48 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x300000000000000}, 0x0) 19:09:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7105]}) 19:09:48 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x3b020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:48 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x400000000000000}, 0x0) 19:09:48 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7205]}) 19:09:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x40000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:48 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x500000000000000}, 0x0) 19:09:48 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x40020000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:48 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x600000000000000}, 0x0) 19:09:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7401]}) 19:09:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:49 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x800000000000000}, 0x0) 19:09:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x41010000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7501]}) 19:09:49 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x900000000000000}, 0x0) 19:09:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x44010000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:49 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xa00000000000000}, 0x0) 19:09:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7601]}) 19:09:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x4a000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:49 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xb00000000000000}, 0x0) 19:09:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7901]}) 19:09:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:49 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xe00000000000000}, 0x0) 19:09:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x4e000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:50 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:50 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xf00000000000000}, 0x0) 19:09:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7a01]}) 19:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x50030000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:50 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x1000000000000000}, 0x0) 19:09:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]}) 19:09:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7b01]}) 19:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x56030000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:50 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x1100000000000000}, 0x0) 19:09:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 19:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x7f04]}) 19:09:50 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x1200000000000000}, 0x0) 19:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 19:09:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5c030000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:51 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x1300000000000000}, 0x0) 19:09:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x8004]}) 19:09:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 19:09:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5d000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:51 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x6000000000000000}, 0x0) 19:09:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x0, 0x0, [0x200000490]}) [ 1435.623584] __nla_parse: 53 callbacks suppressed [ 1435.623613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1435.684865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1435.718387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x8005]}) 19:09:51 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xf5ffffff00000000}, 0x0) [ 1435.773788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 19:09:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x5e000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x0, 0x0, [0x200000490]}) [ 1435.935233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x8601]}) [ 1436.006902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:51 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xfcffffff00000000}, 0x0) 19:09:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x64010000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) [ 1436.109925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 1436.149102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x0, 0x0, [0x200000490]}) [ 1436.193048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:52 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0xffffff7f00000000}, 0x0) 19:09:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x8701]}) [ 1436.407184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 19:09:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x64030000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:52 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x2}, 0x0) 19:09:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b}) 19:09:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048d]}) 19:09:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x8705]}) 19:09:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 19:09:52 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x3}, 0x0) 19:09:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b}) 19:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000600)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x67000000, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) stat(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sysfs$3(0x3) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getattr(0x0, &(0x7f00000004c0), 0x30, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000500)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7f, 0x7, 0xb4, 0x5, 0x0, 0xf0f, 0x1, 0x6, 0x7f, 0x7, 0x100000000, 0x1f, 0x80000001, 0x7fffffff, 0x5, 0xffff, 0x18, 0xb0, 0x7ff, 0x8e, 0x8, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0xf0e, 0x3cd0000000, 0x8001, 0x2, 0xfff, 0x87, 0x7, 0x1f, 0x0, 0x2, 0x0, 0x2, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3ff}, 0x600, 0x7, 0xff, 0x7, 0x5, 0x80, 0x8e}, r5, 0x1, 0xffffffffffffff9c, 0x8) ioctl$TCXONC(r1, 0x540a, 0x79cc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r5, r2, r3}, 0x69094c0dfce03bc1) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff", 0x23}], 0x1}, 0x0) 19:09:52 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x4}, 0x0) 19:09:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 19:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b}) 19:09:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x8b00]}) 19:09:52 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x5}, 0x0) 19:09:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x20000048c]}) 19:09:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 19:09:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) read(r1, &(0x7f0000000180)=""/67, 0x43) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 19:09:53 executing program 5: prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x6}, 0x0) 19:09:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000481, 0x900d]}) [ 1437.520660] ------------[ cut here ]------------ [ 1437.526783] do not call blocking ops when !TASK_RUNNING; state=1 set at [<00000000456aa67b>] n_hdlc_tty_read+0x32a/0x810 [ 1437.572498] WARNING: CPU: 0 PID: 4459 at kernel/sched/core.c:6094 __might_sleep+0x13d/0x190 [ 1437.581038] Kernel panic - not syncing: panic_on_warn set ... [ 1437.587010] CPU: 0 PID: 4459 Comm: syz-executor0 Not tainted 5.0.0-rc3+ #40 [ 1437.594185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1437.603532] Call Trace: [ 1437.606118] dump_stack+0x1db/0x2d0 [ 1437.609742] ? dump_stack_print_info.cold+0x20/0x20 [ 1437.614748] ? __might_sleep+0xe0/0x190 [ 1437.618706] panic+0x2cb/0x65c [ 1437.621879] ? add_taint.cold+0x16/0x16 [ 1437.625937] ? __might_sleep+0x13d/0x190 [ 1437.630348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1437.635968] ? __probe_kernel_read+0x1f4/0x250 [ 1437.640534] ? __warn.cold+0x5/0x48 [ 1437.644231] ? __might_sleep+0x13d/0x190 [ 1437.648279] __warn.cold+0x20/0x48 [ 1437.651815] ? __might_sleep+0x13d/0x190 [ 1437.655861] report_bug+0x263/0x2b0 [ 1437.659557] do_error_trap+0x11b/0x200 [ 1437.663440] do_invalid_op+0x37/0x50 [ 1437.667132] ? __might_sleep+0x13d/0x190 [ 1437.671178] invalid_op+0x14/0x20 [ 1437.674612] RIP: 0010:__might_sleep+0x13d/0x190 [ 1437.679261] Code: 65 48 8b 1c 25 40 ee 01 00 48 8d 7b 10 48 89 fe 48 c1 ee 03 80 3c 06 00 75 2b 48 8b 73 10 48 c7 c7 40 24 4b 88 e8 53 13 f3 ff <0f> 0b e9 43 ff ff ff e8 c7 b9 6d 00 e9 26 ff ff ff e8 bd b9 6d 00 [ 1437.698258] RSP: 0018:ffff8880857679a8 EFLAGS: 00010286 [ 1437.703598] RAX: 0000000000000000 RBX: ffff88808cb14540 RCX: ffffc90005deb000 [ 1437.710845] RDX: 000000000001c0f2 RSI: ffffffff816854c6 RDI: 0000000000000005 [ 1437.718093] RBP: ffff8880857679d8 R08: ffff88808cb14540 R09: ffffed1015cc5021 [ 1437.725343] R10: ffffed1015cc5020 R11: ffff8880ae628107 R12: ffffffff88819de0 [ 1437.732595] R13: 0000000000000019 R14: 0000000000000000 R15: ffff88808cb14540 [ 1437.739856] ? vprintk_func+0x86/0x189 [ 1437.743725] ? __might_sleep+0x13d/0x190 [ 1437.747767] ? n_hdlc_buf_return+0x290/0x290 [ 1437.752160] __might_fault+0xc6/0x1e0 [ 1437.755952] _copy_to_user+0x30/0x120 [ 1437.759733] n_hdlc_tty_read+0x60f/0x810 [ 1437.763776] ? n_hdlc_tty_write+0x790/0x790 [ 1437.768080] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1437.772860] ? wake_up_q+0x100/0x100 [ 1437.776558] ? ldsem_down_read+0x33/0x40 [ 1437.780599] ? ldsem_down_read+0x33/0x40 [ 1437.784667] tty_read+0x196/0x2a0 [ 1437.788102] ? n_hdlc_tty_write+0x790/0x790 [ 1437.792408] __vfs_read+0x116/0xb20 [ 1437.796218] ? tty_poll+0x1a0/0x1a0 [ 1437.799826] ? vfs_copy_file_range+0xbb0/0xbb0 [ 1437.804400] ? security_file_permission+0x94/0x320 [ 1437.809315] ? rw_verify_area+0x118/0x360 [ 1437.813472] vfs_read+0x194/0x3e0 [ 1437.816909] ksys_read+0x105/0x260 [ 1437.820527] ? kernel_write+0x120/0x120 [ 1437.824500] ? trace_hardirqs_off_caller+0x300/0x300 [ 1437.829597] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1437.834341] __x64_sys_read+0x73/0xb0 [ 1437.838245] do_syscall_64+0x1a3/0x800 [ 1437.842113] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1437.847026] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1437.852027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1437.856854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1437.862021] RIP: 0033:0x458099 [ 1437.865207] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1437.884100] RSP: 002b:00007f4e413e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1437.891874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 1437.899123] RDX: 0000000000000043 RSI: 0000000020000180 RDI: 0000000000000004 [ 1437.906373] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1437.913635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e413e86d4 [ 1437.920897] R13: 00000000004c3b5d R14: 00000000004d83b0 R15: 00000000ffffffff [ 1437.930151] Kernel Offset: disabled [ 1437.933961] Rebooting in 86400 seconds..