getownex(0xffffffffffffffff, 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') lseek(r1, 0x20400000, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x0, 0x12, &(0x7f0000000000)='system\'!wlan0proc\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x1, 0x5, 0x9, 0x7f, 0x0, 0xffff, 0x1040, 0x1, 0x9ff, 0x4, 0x24046f0d, 0x3270, 0x2, 0xfffffffffffffff7, 0x0, 0xffffffff00000001, 0x4, 0x101, 0x4, 0x7, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x3, 0xffffffff7fffffff, 0xb9, 0x1, 0x3, 0xfffffffffffffffe, 0x6, 0x1, 0x200, 0x7fff, 0x10000, 0x7ff, 0x0, 0xfffffffffffffffc, 0x71f3b06696202f17, @perf_config_ext={0xff, 0x80}, 0x20000, 0x81, 0x7, 0x0, 0x9, 0x4, 0x100000001}, r3, 0xe, r1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 00:36:20 executing program 3: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000001bc0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x6846de70341668c9) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000000)=""/42, 0xffffffffffffff11}], 0x2, 0x0, 0x181, 0x200f00}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) 00:36:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1009, 0x0) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00') execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file1\x00', 0x10b) dup2(r0, r1) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000001c0)='./file1\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:36:20 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10b, 0xfc, 0x4c, 0x26e, 0x358, 0x0, 0x121, 0x4}, "c8fe8d5d59ff5cd676a256a8598e1ad2f5f234a8b79926425c377b293e5fe1ff99818bcab34e9078f80829e6a48b1f8b997e2fdbb2b897c8b29f5406244092820194e72fea35c262039785c84cc20c0e2997546c39e8e496873fb7efbc640eb48271b1c766d051f2edfd8cd3b10f296b37", [[], [], [], [], [], [], [], [], []]}, 0x991) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000a40)=0x6, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000a00)) close(r0) 00:36:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, r0, 0x0, 0x6, &(0x7f00000000c0)='eth1\\\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='fd/4\x00\xffa\x02\x9b\xaf\xdb9*[9\xadaK\x9c \x17\xe6\xec\xea\xf6]\xc08b\xbf\a\"h\rd\x81\x01\xdc\xddL\x8b\xa5\xf7\xf2\x01\x99\xe6S\xad\\Q[\t\x91\xdd\xed\xb2\x9f\xb5\xe8\xc9\xbb$:\xfbyk\xa5^J8\xb6\x1aaAcD\xa0(\x0e^\xc2\v\xfe\xdf\a-\xba\xc0;0s\x9a\x1c\xb8\xe7\x99\x8e\x92\xd4 S\x02c\xe8K\v\xe23\x10\xe6') lseek(r3, 0x20400000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/relabel\x00', 0x2, 0x0) r5 = dup2(r4, r4) write$P9_RLERROR(r5, &(0x7f0000000000)={0x9}, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x20080000, &(0x7f0000000000)="889e141e771ea1648e52368d1191ba89986a3160c909e61d3451af34e0b23494f033c470244fd9318c9f4797ff0d355e2969b0c87ccf48cb", &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000240)="096aaca82e30f0522a7ff9f09c49be921f9dd654962c5c74e1d123235887e6e7ad5b46ad17aefae02432dc484d077ab5fa88a3226232a719") write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 00:36:23 executing program 4: clone(0x2102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 00:36:23 executing program 0: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x8) recvfrom(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x40012002, &(0x7f0000001180)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0x6}, 0x28, 0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x103080}, 0xc, &(0x7f0000000100)={&(0x7f0000001200)={0x2d8, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbe6e}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf0f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f00000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @rand_addr="66a1577f639ccb67fe892f4945bda1ab", 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfff, @local, 0xdb24}}}}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1263}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x34a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff7eab}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc035}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x251}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8c0}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x476}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8610}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20004091}, 0x20040010) close(r1) preadv(r0, &(0x7f0000001680)=[{&(0x7f0000001540)=""/179, 0xb3}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/18, 0x12}], 0x3, 0x0) 00:36:23 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000580)={0x1000, 0x7, 0x1c, &(0x7f0000000540)="68f7e7c488fe732e2ebada9498845e6dccdea96f21becf7c3ffd9cf1"}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="d00000002500040025bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="06000700f1ff0d000e000e00a80008001c000100ff020000060000000100000005000000090000000a00000008000200090000001c000100ffd0152f80000000010000000700000007000000030000001400020007000500060001800000fe0206000400000000000000090001000100000000000600000006000000060000000c0002000100ff0309007f001c000100fbb3070001010000a90800003f00000080e0d0c380f4da630c0002007f00ffffff00ff0f040008009cf6efb4b83788ee96f445a0d1d9a02b8f3f10c7470a7ad29233dcb1d91aa0a2a9fe43235aca8e3d84838c0ebe33215b"], 0xd0}, 0x1, 0x0, 0x0, 0x2c29af6958aed400}, 0x4) r3 = open(&(0x7f0000000180)='./file0\x00', 0xb41, 0x12) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0x3, 0x3, 0x7ff, 0x0, 0x4}}) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000680)=0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000500)) syz_open_procfs(r4, &(0x7f0000000700)='\x00\x00\x00\x00)mi\t\x00\x00') ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000140)) fcntl$getflags(0xffffffffffffffff, 0x0) pwrite64(r3, &(0x7f0000000200)="f10f3c7379998a7b04ce3c51f5695c9c76b18fc83984ba5b1aaae2a3665e0adb48c5b44066bad5631938c4c2af32e3b328c20b96ca8f9ce162e5aa1b130a506003fd105983a50e3bf39ca688a31e2c9011ba9767791fdbf6e6a329c2358ed9ebfd329cc943322bb0ede3cdf5badf767b9a9c9fade19fe19294748649f9aa1dc1d6096992fd915d9045be0adbbf34", 0x8e, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000000)={0xffffffffffffffc0, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x290400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000840)={r2, @loopback, @empty}, 0xc) accept4$inet(r3, &(0x7f0000000300)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10, 0x80000) 00:36:23 executing program 3: 00:36:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedZi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r4, r5, 0x0, 0x20000102000004) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 00:36:23 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:23 executing program 3: 00:36:23 executing program 4: 00:36:23 executing program 3: 00:36:23 executing program 4: 00:36:23 executing program 3: 00:36:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 00:36:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) 00:36:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x201, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0xb, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'bridge0\x00'}}}}}, 0x34}}, 0x0) 00:36:24 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0xff, &(0x7f0000000040)="0100008b1118e83d1a60c648bce90000071a80000001cc2f21bc6b3f27c52bb9cb53ae3cddebc84972435734ae35f786f3c14da21b241f623c7eb5773d370c79a5716d33ea281ca194c45d9c74b140f591cb6abe2033efb33e97d012194a12aa466b81228c9535d43eade84b116b2ddf053524af184aa42535f78b5bce4fcd8cae16cf1737a31f7dd5d09e93d6b2a694d662609b07be6ef65053a35b5d1ce874541e043a732f80f74d6d09e59d5ffed51a354cf63901b2ab87", 0x40) close(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x200000, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000400)={0x18, 0x1, 0x0, {0x3f}}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000380)={0x3, 0x5, 0x6, 0x9f95, 0x4, 0x4}) write$UHID_CREATE(r2, &(0x7f0000000200)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000100)=""/250, 0xfa, 0xffff, 0x2, 0xffffffff00000000, 0x7, 0x5}, 0x120) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x18}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x837}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/context\x00', 0x2, 0x0) 00:36:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 265.489056] binder: 10873:10877 unknown command 1 [ 265.511970] binder: 10873:10877 ioctl c0306201 20000580 returned -22 [ 265.580894] binder: 10887:10890 unknown command 1 [ 265.599540] binder: 10887:10890 ioctl c0306201 20000580 returned -22 00:36:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) connect$packet(r1, &(0x7f0000000140)={0x11, 0x1f, r4, 0x1, 0x401, 0x6, @dev={[], 0x21}}, 0x14) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x0, 0x1, 0xf42d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x800000000000000, 0x0, 0xffffffffffffffff}) 00:36:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:25 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x3b, @rand_addr=0x8, 0x4e24, 0x1, 'sh\x00', 0x4, 0x4, 0x39}, 0x2c) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @rand_addr=0x9}, {0x307, @broadcast}, 0x8, {0x2, 0x4e23, @remote}, 'hsr0\x00'}) 00:36:25 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', &(0x7f00000001c0)=""/171, 0xab) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 266.260729] binder: 10909:10914 unknown command 1 [ 266.271457] binder: 10909:10914 ioctl c0306201 20000580 returned -22 00:36:25 executing program 0: r0 = socket(0x11, 0x2, 0x0) fcntl$getown(r0, 0x9) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 266.340310] binder: 10918:10920 unknown command 1 [ 266.354274] binder: 10918:10920 ioctl c0306201 20000580 returned -22 00:36:25 executing program 1: mknod$loop(&(0x7f0000000240)='./file0\x00', 0x2c52, 0x1) chdir(&(0x7f0000000100)='./file0\x00') getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000040)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) recvfrom$packet(r0, &(0x7f00000004c0)=""/4096, 0x1000, 0x1, &(0x7f0000000280)={0x11, 0xf8, r1, 0x1, 0x7, 0x6, @dev={[], 0x12}}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:25 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 00:36:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 266.408598] binder: 10928:10930 unknown command 1 [ 266.438648] binder: 10928:10930 ioctl c0306201 20000580 returned -22 [ 266.500748] binder: 10935:10936 unknown command 1 [ 266.519453] binder: 10935:10936 ioctl c0306201 20000580 returned -22 00:36:25 executing program 5: getpid() r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) ioprio_set$uid(0x0, r2, 0x200) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000540)) lseek(r3, 0x20400000, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @local, 0x2}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x9, 0x20, 0xfff, 0x72, 0x0, 0x1, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x2000008f) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 267.117020] binder: 10956:10961 unknown command 1 [ 267.133921] binder: 10956:10961 ioctl c0306201 20000580 returned -22 00:36:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x484080, 0x101) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r1, 0x0, 0x9, 0x3, 0xfffffffffffffffc}) r2 = socket(0x10, 0x80803, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000080)={0x60, 0x0, 0x3, {{0x800, 0x9, 0x5, 0x1, 0x7fff, 0xfffffffffffffffb, 0x3, 0x7}}}, 0x60) setsockopt(r2, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r2) [ 267.177943] binder: 10970:10975 unknown command 1 00:36:26 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) [ 267.213474] binder: 10970:10975 ioctl c0306201 20000580 returned -22 [ 267.227955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10981 comm=syz-executor.0 00:36:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0/file0\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r1, r1, &(0x7f0000000180)=0x74000000, 0x5) 00:36:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 267.964246] binder: 11004:11014 unknown command 1 [ 267.977266] binder: 11004:11014 ioctl c0306201 20000580 returned -22 00:36:26 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pipe(&(0x7f0000000000)) 00:36:26 executing program 0: r0 = socket(0x11, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x0, r1}) getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x8}) close(r0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x10, 0x15f) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) 00:36:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x67) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=r2) setreuid(r3, 0x0) 00:36:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) link(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000001300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001340)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001440)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x2, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x1000, 0x40}, {&(0x7f0000001080)="6b618623af51f3b513e06037ecafc45e592b28ba16f101a0e8ecb17132492fe06ae49a974c21c0d118f6bcc9baf0f950647c082636a6f22574f9985d897911e3d9650a123ed85cf01068cc1c6715b036f66e0c39b87cea2d6b3778d789406393", 0x60, 0xa47}], 0x40000, &(0x7f0000001480)={[{@fat=@check_normal='check=normal'}, {@nodots='nodots'}, {@fat=@check_normal='check=normal'}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}], [{@euid_lt={'euid<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_lt={'euid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash='hash'}, {@audit='audit'}, {@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef', 0x3d, '*!em0[ppp1GPL-ppp1-'}}, {@fowner_gt={'fowner>', r3}}]}) close(r0) 00:36:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 268.861816] binder: 11053:11066 Release 1 refcount change on invalid ref 0 ret -22 [ 268.873899] binder: 11053:11066 unknown command 1 [ 268.888978] binder: 11053:11066 ioctl c0306201 20000580 returned -22 00:36:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000240)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) fcntl$setown(r0, 0x8, r3) 00:36:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:27 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x3) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) bind$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) [ 268.938691] binder: 11074:11076 Release 1 refcount change on invalid ref 0 ret -22 [ 268.956980] binder: 11074:11076 unknown command 1 [ 268.964791] binder: 11074:11076 ioctl c0306201 20000580 returned -22 00:36:27 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) pipe(&(0x7f0000000700)={0xffffffffffffffff}) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000740)=""/88) fstat(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x1, r0}, {0x2, 0x4, r1}, {0x2, 0x7, r2}, {0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x5, r5}, {0x8, 0x5, r6}], {0x10, 0x3}, {0x20, 0x6}}, 0x54, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r8 = fcntl$getown(r4, 0x9) fcntl$setownex(r7, 0xf, &(0x7f00000007c0)={0x3, r8}) 00:36:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 269.018232] binder: 11084:11086 Release 1 refcount change on invalid ref 0 ret -22 [ 269.034363] binder: 11084:11086 unknown command 1 [ 269.045000] binder: 11084:11086 ioctl c0306201 20000580 returned -22 [ 269.084324] binder: 11093:11096 Release 1 refcount change on invalid ref 0 ret -22 [ 269.095062] binder: 11093:11096 unknown command 1 [ 269.102510] binder: 11093:11096 ioctl c0306201 20000580 returned -22 00:36:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:28 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f0000000000)='(user%\x0e^\\\\/\x00'}, 0x30) syz_open_procfs(r0, &(0x7f0000000100)='numa_maps\x00') 00:36:28 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x400800, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x5dc4, 0x1, 0x7, 0x7, 0x5, 0x9, 0x1, 0x8, 0x6, 0x5, 0x8, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) fcntl$setownex(r1, 0xf, &(0x7f00000002c0)={0x0, r3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000480)={{0x2, 0x4e23, @empty}, {0x306, @broadcast}, 0x28, {0x2, 0x4e23, @empty}, 'lapb0\x00'}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[]], 0x8) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0xa1c28e4b9e7a20ae, 0x1, 0x0, {0x100010010}}, 0x18) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000240)) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000180)={0x7, 0x7}) syz_open_pts(r2, 0x400000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0xffffffffffffffc0) r4 = syz_open_pts(r2, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000340)={0xb4f6, 0x5, 0x4, 0xda7, 0x2, 0x6, 0x4, 0x2, 0x7ff, 0x8000000000000c00, 0x800, 0x7fff}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7) 00:36:28 executing program 2: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:28 executing program 3: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x101001, 0x0) 00:36:28 executing program 0: rmdir(&(0x7f0000000000)='./file0\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x94000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000080)={0x5, 0xff, {0x55, 0x2, 0xffffffff, {0x9}, {0x74, 0x3}, @const={0x8, {0x401, 0x3, 0xfff, 0x7}}}, {0x51, 0x5d0b, 0x682, {0x401, 0x3f}, {0x20}, @rumble={0x20, 0xfa4c}}}) r1 = socket(0x11, 0x2, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r1) [ 269.855548] binder: 11143:11151 Release 1 refcount change on invalid ref 0 ret -22 [ 269.868091] binder: 11143:11151 unknown command 1 [ 269.875920] binder: 11143:11151 ioctl c0306201 20000580 returned -22 00:36:28 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000000)={0x70, 0xffffffffffffffda, 0x1, [{0x5, 0x5, 0x0, 0x5}, {0x1, 0x1, 0x2a, 0xc9d, 'nodevmime_type\xce[vboxnet1-vboxnet0nodeveth1'}]}, 0x70) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:28 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) write$selinux_validatetrans(r1, &(0x7f00000001c0)={'system_u:object_r:setrans_initrc_exec_t:s0', 0x20, 'system_u:object_r:getty_log_t:s0', 0x20, 0x200, 0x20, '/sbin/dhclient\x00'}, 0x70) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 269.941523] binder: 11159:11164 Release 1 refcount change on invalid ref 0 ret -22 [ 269.980674] binder: 11159:11164 unknown command 1 00:36:28 executing program 0: r0 = socket(0x11, 0x2, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0), 0x0, 0x40010001, 0x0, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'bridge_slave_0\x00', 0xde6}) close(r0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0x100000001, 0x3040, 0x5, 0x80000001, 0x3, [{0x10001, 0x7fffffff, 0x6, 0x0, 0x0, 0x3288}, {0x800, 0x5, 0x2}, {0x6502, 0x6, 0x9, 0x0, 0x0, 0x2000}]}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) 00:36:28 executing program 3: clone(0x1000000000011, &(0x7f0000001680), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000000fc0), 0x4, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4c2000, 0x0) 00:36:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 270.004247] binder: 11159:11164 ioctl c0306201 20000580 returned -22 [ 270.085949] binder: 11184:11186 Release 1 refcount change on invalid ref 0 ret -22 [ 270.105861] binder: 11184:11186 unknown command 1 00:36:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$input_event(r1, &(0x7f00000000c0)={{}, 0x5, 0xffffffffffffffff, 0x5}, 0x18) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x62) 00:36:29 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc094}, 0x4040000) [ 270.137197] binder: 11184:11186 ioctl c0306201 20000580 returned -22 00:36:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:29 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8422"]) 00:36:29 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bond_slave_0\x00', {0x2, 0x4e21, @local}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000400)=""/246) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x29}) 00:36:29 executing program 0: r0 = socket(0x11, 0x2, 0x0) get_thread_area(&(0x7f0000000040)={0x5, 0x100000, 0x4000, 0x8001, 0x101, 0x9, 0x2, 0x101, 0x200, 0xffff}) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) 00:36:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001b80)) r4 = epoll_create1(0x80000) r5 = timerfd_create(0x0, 0x0) r6 = getpgid(0xffffffffffffffff) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x3, {{0x2, 0x7ff, 0x0, r6}}}, 0x28) timerfd_settime(r5, 0x0, &(0x7f0000005000)={{}, {0x0, 0x1c9c380}}, 0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x15555555555556ab, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x2001}) 00:36:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 270.666041] binder: 11214:11219 Release 1 refcount change on invalid ref 0 ret -22 [ 270.682483] binder: 11214:11219 unknown command 1 [ 270.692132] binder: 11214:11219 ioctl c0306201 20000580 returned -22 00:36:29 executing program 5: syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0363084004000000006a123c11f95c37e437fcee6ffac4faaceb51c9425800000000000000000000"], 0x0, 0x0, 0x0}) 00:36:29 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd+', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:36:29 executing program 3: openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) getitimer(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x17, 0x0, &(0x7f00000001c0)}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x9, 0x40) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40002, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'veth0_to_hsr\x00', 0x4}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x7, 0x803) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) [ 270.719161] binder: 11231:11232 Acquire 1 refcount change on invalid ref 0 ret -22 [ 270.740542] binder: 11231:11232 Release 1 refcount change on invalid ref 0 ret -22 [ 270.755554] binder: 11231:11232 unknown command 1 00:36:29 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x8, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000004c0)=0x0) perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x8) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000003c0)={0x0, 0x8001, 0x4000000000000000}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000180)=""/6) mknod(0x0, 0x0, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r3, &(0x7f0000000400)={0xff}, 0x8) write(r3, &(0x7f0000000340), 0x10000014c) ioctl$TCXONC(r0, 0x540a, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/70, 0x46}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000980)=""/4096, 0x1000}, {0x0}], 0x2}, 0x9}], 0x2, 0x0, 0x0) 00:36:29 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@rand_addr, @broadcast, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'bond_slave_1\x00'}) close(r0) [ 270.763588] binder: 11231:11232 ioctl c0306201 20000580 returned -22 [ 270.774377] binder: 11235:11236 BC_FREE_BUFFER u3c126a0000000004 no match [ 270.779278] binder: 11235:11240 BC_FREE_BUFFER u3c126a0000000004 no match 00:36:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:30 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x4, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:30 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = getegid() mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) [ 271.554124] binder: 11264:11266 Acquire 1 refcount change on invalid ref 0 ret -22 [ 271.589411] binder: 11264:11266 Release 1 refcount change on invalid ref 0 ret -22 00:36:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 271.604001] binder: 11264:11266 unknown command 1 [ 271.611240] binder: 11264:11266 ioctl c0306201 20000580 returned -22 00:36:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in6=@remote}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=""/172) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:36:30 executing program 0: r0 = socket(0x11, 0x2, 0xfffffffffffffffb) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0xfffffffffffffeb6) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, 0x9) close(r0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) [ 271.642839] binder: 11275:11276 Acquire 1 refcount change on invalid ref 0 ret -22 [ 271.672434] binder: 11275:11276 Release 1 refcount change on invalid ref 0 ret -22 [ 271.688592] binder: 11275:11276 unknown command 1 00:36:30 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 271.697605] binder: 11275:11276 ioctl c0306201 20000580 returned -22 00:36:30 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:30 executing program 5: r0 = socket$inet(0x2, 0x400000000001, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x5, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 00:36:30 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:31 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x400) sendfile(r0, r1, 0x0, 0x10000) request_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/58) keyctl$unlink(0x9, 0x0, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x8, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000400)="39d8d401cdb41dc36ee647f760ebbb7873390f63bad38167a12d3ba3") r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003180), 0x0, 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000100)) 00:36:31 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x7}}, 0x18) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xffffffff}}, {@allow_other='allow_other'}]}}) 00:36:31 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x525) close(r0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, 0xcb43, 0xf, 0x1d, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_key={0x1a, 0x8, 0x630, 0x0, "7dc51b077342cc4e962b209d6942c4eb7e321de9abc288a24e1f65be08e649cca840a409642b8267a34cf8888bfa01e2de3ba4c8c3320d5b676e72882ce60a6931f888c0ff574cfcebbfd87cedf367a6e926133a7f02545138e7e8b5259f94dd6b8f778ae0ed822a34089c65c6d1f45f52d2cdcbf304f3d7d060184a0702dd0c6a5d35d28baa6720f73ecf4ae2b6180abb9715ba6d10ff8500af94da9fb4d0e661f78c63e4e75ecf2475887b276436eae2eead9c36e69e79382d924ac40095decb35ba9806cc"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0xe8}}, 0x40000) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x3ff, 0x4) 00:36:31 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000000f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8) r1 = socket(0x40000000011, 0x80002, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000180)="b88e48d0ec8b9f", 0x7) bind$inet(r0, 0x0, 0x2f06938eea148452) 00:36:31 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:31 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:31 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:31 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000005c0)=ANY=[]) 00:36:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:31 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000007000/0x4000)=nil, 0x4000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) personality(0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = creat(&(0x7f0000000740)='./bus/file0/file0\x00', 0x32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000a80)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000010080}, 0xc, &(0x7f00000009c0)}, 0x0) ftruncate(0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) set_thread_area(0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x76, 0x0) fallocate(0xffffffffffffffff, 0x48, 0x5, 0x0) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000540)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000023c0)={{{@in6=@loopback, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000680)={0x3}, 0x4) request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='syz', 0xfffffffffffffffa) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@dev={0xfe, 0x80, [], 0x1d}, @in=@local, 0x4e21, 0x1000, 0x4e21, 0x5, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x6}, 0x0, 0x6e6bbf, 0x2}, {{}, 0x0, @in6=@dev}}, 0xe8) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 272.504309] binder: 11338:11339 Acquire 1 refcount change on invalid ref 0 ret -22 [ 272.523937] binder: 11338:11339 Release 1 refcount change on invalid ref 0 ret -22 [ 272.547871] binder: 11338:11339 unknown command 1 [ 272.560147] binder: 11338:11339 ioctl c0306201 20000580 returned -22 00:36:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) getcwd(&(0x7f0000000040)=""/194, 0xc2) close(r1) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:36:32 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x400) sendfile(r0, r1, 0x0, 0x10000) request_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/58) keyctl$unlink(0x9, 0x0, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x8, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000400)="39d8d401cdb41dc36ee647f760ebbb7873390f63bad38167a12d3ba3") r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003180), 0x0, 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000100)) 00:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:32 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) 00:36:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff4d, 0x10001}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140), 0x1325e1) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[], 0x0) fcntl$setstatus(r1, 0x4, 0x42803) r2 = socket(0x11, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001740)={&(0x7f0000001700)='bridge0\x00', r1}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f00000016c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x11c8, 0xf, 0x5, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x5}, [@nested={0x68, 0x3f, [@typed={0x8, 0x3b, @uid=r3}, @generic="6755371e810f0cee66295d3af318e325b2c489684ad0e7731a6c360b1b08b158b1927de9f7a901470a339043ed8d0c94aacb6e48c2d3e43bd0ff5391ba6641aa8afa41804a3d3399f74daa2759358d2a9bc4", @typed={0x8, 0x6e, @fd=r0}]}, @nested={0x10, 0x71, [@typed={0xc, 0x42, @u64=0x3}]}, @generic="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", @typed={0x8, 0x5d, @fd=r2}, @typed={0xc, 0x69, @str='bridge0\x00'}, @generic="da27f4c40bd0e528b0bd79377114b65f66b7cc85c31461dfc8052992f6de9188e6fc1b0f471588d94aca60a9faa5ffe26ce14d7badf0656cc7d6c060635907280efb269d888a6d2c0a2bf0d91dde89235846d488567bd3f841f9802c9b559847776f066604aaed8fedb32125ed6e7c4ead033c3255f99128e6d20753", @typed={0x8, 0x6a, @uid=r4}, @generic="12776db714ca2a950115d6ae4f152003c300fc89b0550510503531c941a61266cafdf8a2ac89737d30122f2ccd7bb60b06001fce83a2c1f364163795aade7d2ba05a4637964743f581f09178d84f6a37e1c4f30f81534b3a807cccfd6592f8885e5d14412a9a67ceffab9985db430317c510256d3fb34300f99893d6fd6e372cbe5d97ab184723b8c1b994803a3b10dc4d3887439cce7502468e54ac", @typed={0x8, 0x31, @uid=r5}]}, 0x11c8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}) close(r2) 00:36:32 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xee6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x6, 0x9, 0x19}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6174000001000000000000000030d56310f909f6563039e4c40d4be5c10000e4dbb7748700200000200000000000000000000000000004000000000018030000cc000000ac010000000000001004c1e090e1fe91"], 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, r0, 0x0) [ 273.320371] binder: 11374:11376 Acquire 1 refcount change on invalid ref 0 ret -22 [ 273.343460] binder: 11374:11376 Release 1 refcount change on invalid ref 0 ret -22 [ 273.354898] binder: 11374:11376 unknown command 1 00:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 273.364562] binder: 11374:11376 ioctl c0306201 20000580 returned -22 00:36:32 executing program 3: r0 = gettid() r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) pread64(r1, &(0x7f00000000c0)=""/37, 0x37f, 0x0) timer_settime(0x0, 0x200000, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) close(r1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) tkill(r0, 0x16) [ 273.392785] binder: 11390:11391 Acquire 1 refcount change on invalid ref 0 ret -22 [ 273.409416] binder: 11390:11391 Release 1 refcount change on invalid ref 0 ret -22 [ 273.434797] binder: 11390:11391 unknown command 1 00:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 273.442495] binder: 11390:11391 ioctl c0306201 20000580 returned -22 [ 273.469379] binder: 11396:11398 Release 1 refcount change on invalid ref 0 ret -22 [ 273.480631] binder: 11396:11398 unknown command 1 00:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 273.490995] binder: 11396:11398 ioctl c0306201 20000580 returned -22 [ 273.511795] syz-executor.0: [ 273.515531] binder: 11404:11405 Release 1 refcount change on invalid ref 0 ret -22 [ 273.515538] binder: 11404:11405 unknown command 1 [ 273.515547] binder: 11404:11405 ioctl c0306201 20000580 returned -22 [ 273.559485] binder: 11410:11412 Release 1 refcount change on invalid ref 0 ret -22 [ 273.559491] binder: 11410:11412 unknown command 1 [ 273.559499] binder: 11410:11412 ioctl c0306201 20000580 returned -22 [ 273.609089] vmalloc: allocation failure: 17179869180 bytes, mode:0x24000c2(GFP_KERNEL|__GFP_HIGHMEM) [ 273.620576] CPU: 0 PID: 11386 Comm: syz-executor.0 Not tainted 4.9.155+ #27 [ 273.628195] ffff8801c997f8c8 ffffffff81b47871 1ffff1003932ff1b ffff8801a561af80 [ 273.636982] ffffffff82aa9840 0000000000000001 0000000000400000 ffff8801c997f9f0 [ 273.647142] ffffffff814fe435 0000000041b58ab3 ffffffff82e3e748 ffffffff81428790 [ 273.657621] Call Trace: [ 273.660719] [] dump_stack+0xc1/0x120 [ 273.667473] [] warn_alloc.cold+0x76/0x93 [ 273.676443] [] ? zone_watermark_ok_safe+0x260/0x260 [ 273.684530] [] ? native_set_pgd+0x50/0x50 [ 273.690682] [] __vmalloc_node_range+0x363/0x610 [ 273.698515] [] ? rcu_read_lock_sched_held+0x10b/0x130 [ 273.706002] [] vmalloc+0x5c/0x70 [ 273.712045] [] ? xt_alloc_entry_offsets+0x44/0x50 [ 273.719258] [] xt_alloc_entry_offsets+0x44/0x50 [ 273.726422] [] translate_table+0x215/0x16c0 [ 273.733942] [] ? map_vm_area+0xa8/0xe0 [ 273.742193] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 273.749931] [] ? compat_do_ip6t_get_ctl+0x910/0x910 [ 273.757992] [] ? __check_object_size+0x251/0x38e [ 273.764833] [] do_ip6t_set_ctl+0x2ce/0x470 [ 273.771499] [] ? compat_do_ip6t_set_ctl+0x150/0x150 [ 273.779581] [] ? mutex_unlock+0x9/0x10 [ 273.785728] [] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 273.793992] [] nf_setsockopt+0x6d/0xc0 [ 273.800529] [] ipv6_setsockopt+0x10b/0x140 [ 273.807283] [] tcp_setsockopt+0x8a/0xe0 [ 273.813215] [] sock_common_setsockopt+0x9a/0xe0 [ 273.819699] [] SyS_setsockopt+0x159/0x240 [ 273.825854] [] ? SyS_recv+0x40/0x40 [ 273.831920] [] ? SyS_clock_gettime+0x118/0x1f0 [ 273.838509] [] ? do_syscall_64+0x4a/0x570 [ 273.844983] [] ? SyS_recv+0x40/0x40 [ 273.850635] [] do_syscall_64+0x1ad/0x570 [ 273.856715] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 273.864459] Mem-Info: [ 273.867010] active_anon:80414 inactive_anon:41 isolated_anon:0 [ 273.867010] active_file:9100 inactive_file:15336 isolated_file:0 [ 273.867010] unevictable:0 dirty:177 writeback:0 unstable:0 [ 273.867010] slab_reclaimable:5672 slab_unreclaimable:59029 [ 273.867010] mapped:58694 shmem:52 pagetables:1655 bounce:0 [ 273.867010] free:1417048 free_pcp:503 free_cma:0 [ 273.905929] Node 0 active_anon:321656kB inactive_anon:164kB active_file:36400kB inactive_file:61360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:234776kB dirty:708kB writeback:0kB shmem:208kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 273.933020] DMA32 free:3019432kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020108kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:676kB local_pcp:32kB free_cma:0kB [ 273.967594] lowmem_reserve[]: 0 3505 3505 [ 273.972784] Normal free:2648744kB min:5580kB low:9168kB high:12756kB active_anon:321656kB inactive_anon:164kB active_file:36400kB inactive_file:61360kB unevictable:0kB writepending:712kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:22688kB slab_unreclaimable:236136kB kernel_stack:5120kB pagetables:6620kB bounce:0kB free_pcp:1324kB local_pcp:660kB free_cma:0kB [ 274.010493] lowmem_reserve[]: 0 0 0 [ 274.014820] DMA32: 2*4kB (UM) 2*8kB (M) 3*16kB (M) 1*32kB (U) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019432kB [ 274.036070] Normal: 860*4kB (UME) 3289*8kB (UME) 2510*16kB (UME) 217*32kB (UME) 200*64kB (UME) 103*128kB (UME) 31*256kB (UM) 15*512kB (UME) 7*1024kB (UME) 4*2048kB (UME) 614*4096kB (M) = 2648760kB 24494 total pagecache pages [ 274.062308] 0 pages in swap cache [ 274.066426] Swap cache stats: add 0, delete 0, find 0/0 [ 274.072405] Free swap = 0kB [ 274.075807] Total swap = 0kB [ 274.078997] 1965979 pages RAM [ 274.082353] 0 pages HighMem/MovableOnly [ 274.086705] 313623 pages reserved 00:36:33 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x50000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) pread64(r1, &(0x7f00000000c0)=""/37, 0x37f, 0x0) timer_settime(0x0, 0x200000, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) close(r1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) tkill(r0, 0x16) 00:36:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:33 executing program 0: r0 = socket(0x15, 0x2, 0xfffffffffffffffc) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="010000000000060000071a80000001cc", 0xfffffffffffffe72) 00:36:33 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x9, 0x10) futex(&(0x7f0000000000), 0x9, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) tkill(r0, 0x3f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="052fc731b00040efb7ef3d6bec5dffff0700050074efe5615ab12fdc36c312fb7920644f0000005200000000eefc64a56ebaffb151e3994c73a3377f083eed4c4fafa14d2de6b74be3b6698d3b347ca8eb7230435a70fe0e5716340ed5c67a62279b49470804884d8aff80a47628a610fd316f0d0d0a3e2bba6383f1a4a55e313da6f4794c9034530e73168db83b6c5f25ae769661a3a0a1728a81794482f2295a125c3c126675d4728c4004de44874d26184413562a7a9625fb1f2c350b2caafaceabc424ccc568596c6121099fe6652ae418be21ad7667606a43085565f237cf8cabc41a3d2ef50057f3e296ed5daa7c57cd"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x8) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000300)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2b9787d6) accept4(r2, 0x0, &(0x7f00000014c0), 0x0) 00:36:33 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 274.163510] binder: 11427:11431 ioctl c0306201 0 returned -14 [ 274.172654] binder: 11427:11431 Release 1 refcount change on invalid ref 0 ret -22 [ 274.181024] binder: 11427:11431 unknown command 1 [ 274.187250] binder: 11427:11431 ioctl c0306201 20000580 returned -22 00:36:33 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) prctl$PR_GET_THP_DISABLE(0x2a) 00:36:33 executing program 3: syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000180)={0xbf, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x6ea1617c}, 0xffffffffffffffea) creat(&(0x7f0000000280)='./file0\x00', 0x6) rt_sigtimedwait(&(0x7f0000000040)={0x5}, &(0x7f0000000080), &(0x7f0000000140), 0x8) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x4000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000240)=0x9, 0x4) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) lseek(r1, 0x0, 0x0) clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x313, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:36:33 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = request_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffd) r2 = add_key(&(0x7f00000004c0)='syzkaller\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000600)="33b2a5a86c6b94536dd0c50fd52b077ee53a2d8859cc9a61b7a6013fa0e91cbd6120bc28dae397a2a3f5ea1a323bd164af632bdc252f90cb5e1c3197a3316300ca89c85289dd31aac1e904d25de7d0f59d57c1de5f0921c19accd4676b20c34d374f4e3e5203534bb99c2f64c29c872d5bf6b4a561c2b19f695377937660", 0xfffffecc, r1) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000400)='./file0\x00', 0x400, 0x0) lstat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xa7) keyctl$search(0xa, r2, &(0x7f0000000100)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, r3) 00:36:33 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) [ 274.210805] binder: 11442:11444 ioctl c0306201 0 returned -14 [ 274.218729] binder: 11442:11444 Release 1 refcount change on invalid ref 0 ret -22 [ 274.232976] binder: 11442:11444 unknown command 1 [ 274.253738] binder: 11442:11444 ioctl c0306201 20000580 returned -22 [ 274.565830] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 00:36:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0xf2a3, 0x0, 0x0, 0x2}) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffcba) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) 00:36:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x5, &(0x7f0000000040)='team\x00'}, 0x30) r4 = syz_open_procfs(r3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) poll(&(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 00:36:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:33 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000480)=0x4, 0xffffffffffffff11) r1 = socket(0x11, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[]}, 0x1, 0x0, 0x0, 0x90}, 0x800) setsockopt(r1, 0x3f, 0xffffffffffffffff, &(0x7f0000000200)="0100000000000600d09c9e5c1d3d593f", 0x10) close(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @rand_addr=0x800}, @in6=@ipv4={[], [], @rand_addr=0x9}, 0x4e21, 0x7, 0x4e21, 0x8001, 0xa, 0x20, 0xa0, 0x89, r2, r3}, {0x9, 0x6, 0x6, 0x4254, 0x0, 0x9, 0x7ff, 0xffffffffffffffff}, {0x8, 0x1, 0x40, 0x7}, 0x8, 0x6e6bbd, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x6c}, 0xa, @in6=@local, 0x3507, 0x3, 0x2, 0x6, 0x1, 0x0, 0x4}}, 0xe8) [ 274.991725] binder: 11478:11481 ioctl c0306201 0 returned -14 [ 275.002767] binder: 11478:11481 Release 1 refcount change on invalid ref 0 ret -22 00:36:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 275.032343] binder: 11478:11481 unknown command 1 [ 275.046788] binder: 11478:11481 ioctl c0306201 20000580 returned -22 [ 275.094946] binder: 11492:11494 Release 1 refcount change on invalid ref 0 ret -22 [ 275.125866] binder: 11492:11494 unknown command 1 [ 275.148574] binder: 11492:11494 ioctl c0306201 20000580 returned -22 00:36:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x5, &(0x7f0000000040)='team\x00'}, 0x30) r4 = syz_open_procfs(r3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) poll(&(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 00:36:36 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x408, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) 00:36:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x5, &(0x7f0000000040)='team\x00'}, 0x30) r4 = syz_open_procfs(r3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) poll(&(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 00:36:36 executing program 1: clone(0x4000000, &(0x7f00000001c0)="360f9a1ce569d8ae3fddc3cf4e6c464742aea3d2ce82f922fdf0dfc51b44a050d8f4ffeada5da86de052e534f5ada4ba8d18f9ba848165cfb0d117eba841f6f079643ae9b6d9527666901dc084db051bd15deb65ece7e5fe40fb56083462cb12eaced928927d723242b2c13177db4f5eadd9d50da3ed7eef90a09aae0b1fa3902d7e3847f65815f38aabcaec0fb0a57fd35d7122ad1e792191b59edd9098f052acc4c768e61d49f295912d6f91296f74aa4da89a950c83ea0bda", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)="d3eab26d527d6dee9e4408c72cabc38c") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:36 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xac, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd0c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xfffffcba) r3 = syz_open_pts(r2, 0x4a0100) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)) 00:36:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 277.174285] binder: 11511:11518 Release 1 refcount change on invalid ref 0 ret -22 [ 277.185552] binder: 11511:11518 unknown command 1 [ 277.207577] binder: 11511:11518 ioctl c0306201 20000580 returned -22 00:36:36 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) dup(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) close(r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@initdev}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) [ 277.307267] binder: 11533:11536 Release 1 refcount change on invalid ref 0 ret -22 [ 277.324149] binder: 11533:11536 unknown command 1 00:36:36 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bcsh0\x00', 0x1000}) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:36 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200100, 0x0) connect(r1, &(0x7f00000001c0)=@rc={0x1f, {0x2, 0x10001, 0xf6e3, 0x0, 0x80000000, 0x9}, 0x3ff}, 0x80) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x3, {0x6}}, 0x18) 00:36:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:36 executing program 3: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x408, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) [ 277.349668] binder: 11533:11536 ioctl c0306201 20000580 returned -22 00:36:36 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xe2) setsockopt$inet6_udp_int(r1, 0x11, 0x20000100000000a, &(0x7f0000000200)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x8000008800, &(0x7f0000000000)={0xa, 0x200000000004e23, 0x0, @mcast1}, 0x1c) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendto$inet6(r1, &(0x7f0000000d40)="dd", 0x1, 0x0, 0x0, 0x0) 00:36:36 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303000303030303030303130303030302cfdff65725f69643d000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:36:36 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) getpid() getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:36:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:36 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x277, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x8001, 0xd8, 0x9, 0x20, 0x5eb, 0x1ff, 0x1}, &(0x7f0000000040)={0x9, 0x7, 0x6c, 0x46, 0x780, 0x1f80000000, 0x6, 0x1}, &(0x7f0000000080)={0x8, 0x7, 0x100000001, 0x3, 0x9, 0x1, 0x9, 0x5}, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140)={0x3}, 0x8}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0xc0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x400, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000340), 0xffc1) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, ',-+security{(wlan1#'}], 0xa, "98171f91ef5a98df4746420c8ed015584349717cca16b958f8c3a2587de42d938dfcdcdbee2e2a35bc16ea6bb4f1796afc2e9417ab5e603ea708b528bb9aee954209b50da24ed55fbeb8c290d62fcdb45bfb11c926318a7c464bd1"}, 0x85) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffc000/0x3000)=nil) [ 277.410655] binder: 11549:11552 Release 1 refcount change on invalid ref 0 ret -22 [ 277.423772] binder: 11549:11552 unknown command 1 [ 277.429579] binder: 11549:11552 ioctl c0306201 20000580 returned -22 [ 277.488132] binder: 11562:11565 Release 1 refcount change on invalid ref 0 ret -22 [ 277.500153] binder: 11562:11565 unknown command 1 [ 277.508132] binder: 11562:11565 ioctl c0306201 20000580 returned -22 00:36:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:36 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:36 executing program 0: r0 = socket(0x11, 0x4, 0x3) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 00:36:36 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote, @ipv4={[], [], @local}, @empty, 0x6, 0x7fffffff, 0x10001, 0x400, 0x800, 0x800000, r1}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0xfffffd) sendfile(r3, 0xffffffffffffffff, &(0x7f00000037c0)=0xf10001, 0xfffffdef) syz_genetlink_get_family_id$team(0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$setregs(0xf, r4, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000032c0)={{{@in=@dev, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000033c0)=0xe8) getgroups(0x3, &(0x7f0000005840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4805) r5 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="300376ae4e5b36d9ce86b272ab40cd99e21587e6f556772c3efd83e703c78e77e00522ccb115fc62a51c0dcda738c20caa89755daff9ada6ccee511d8e23179d3b1ba268685a93c0c56f61b1e9fa1dc05b5741a76f8015fae9dc8c9549aa098c59ee7cc784fa52f7bd32a58efc42a92805e1d5866a18b480225f6b460b59bef19bcafcda3a4053b8980eddb8748322af2e17a6f71b8ecbac1a4bb504e0ca38048ff515a8b89994675b31a8eaff52f6e2ad9e157894a7ae5c83edd192b4c780922f686bc18d7217", 0xc7, 0xfffffffffffffffc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="100329bd70f2fddbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4080) keyctl$revoke(0x3, r5) 00:36:36 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) 00:36:36 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)={0x2d, 0x3, 0x0, {0x0, 0xc, 0x0, '^.ppp1nodev('}}, 0x2d) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x4a0, 0x280, 0x140, 0x0, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f00000000c0), {[{{@arp={@broadcast, @multicast2, 0xff0000ff, 0x0, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8c, 0x8, 0x7fffffff, 0x10000, 0x3f, 'ip6_vti0\x00', 'lapb0\x00', {}, {0xff}, 0x0, 0x5}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @loopback, @multicast2}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0x0, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x1ff, 0x8001, 0x7, 0x7ff, 0x10001, 0x0, 'ip_vti0\x00', 'veth0\x00', {0xff}, {0xff}, 0x0, 0x220}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x20}, @mac, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, 0xf, 0x8dcbfb3fc0534fdf}}}, {{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x9, 0xd}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) 00:36:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$setopts(0x4200, r2, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x2) 00:36:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 278.044135] binder: 11586:11594 Release 1 refcount change on invalid ref 0 ret -22 [ 278.063965] binder: 11586:11594 unknown command 1 [ 278.084151] binder: 11586:11594 ioctl c0306201 20000580 returned -22 00:36:37 executing program 5: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000028c0)={0x8, "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", 0x1000}, 0x1006) setgroups(0x3d2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) sendfile(r1, r0, 0x0, 0x71c) 00:36:37 executing program 3: r0 = socket(0x0, 0x7, 0x8) connect(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x4f) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x7, 0x4) socket$netlink(0x10, 0x3, 0x5) 00:36:37 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d4d19f35393cd8c87db840debf421bf5afd6db8739409e9962dc7551487042943dcd1ee535743cdd9e4a102", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:36:37 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r1}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', r2}) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) [ 278.138407] binder: 11614:11617 Release 1 refcount change on invalid ref 0 ret -22 00:36:37 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents(r2, &(0x7f0000000440)=""/46, 0x2e) r3 = socket$inet6(0xa, 0x3, 0x2) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000d2c000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000064b000/0x3000)=nil) munlockall() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket(0x0, 0x1, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000240)={0x7, 0x5}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0xf5d, 0x4, 0x0, 0x0, 0x0, 0x20000}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@remote, 0x7e}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xfcd) syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x2, 0x0) 00:36:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:37 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0xc937) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14103e, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x6b1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800206, 0x81000000011, r2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffffffff, 0xfffffffeffffffff, 0x9}) mlock(&(0x7f0000382000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='/selinux/avc/cache_threshold\x00', r0}, 0x10) fadvise64(r0, 0x0, 0x0, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) [ 278.181678] binder: 11614:11617 unknown command 1 [ 278.197735] binder: 11614:11617 ioctl c0306201 20000580 returned -22 [ 278.249758] binder: 11645:11649 Release 1 refcount change on invalid ref 0 ret -22 [ 278.261195] binder: 11645:11649 unknown command 1 [ 278.266628] binder: 11645:11649 ioctl c0306201 20000580 returned -22 [ 278.273666] EXT4-fs warning (device sda1): ext4_group_extend:1731: can't shrink FS - resize aborted 00:36:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:37 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) close(r0) [ 278.294409] EXT4-fs warning (device sda1): ext4_group_extend:1731: can't shrink FS - resize aborted [ 278.303457] FAT-fs (loop5): bogus number of reserved sectors [ 278.303476] FAT-fs (loop5): Can't find a valid FAT filesystem [ 278.372307] FAT-fs (loop5): bogus number of reserved sectors [ 278.373667] binder: 11661:11664 Release 1 refcount change on invalid ref 0 ret -22 [ 278.373673] binder: 11661:11664 unknown command 1 [ 278.373680] binder: 11661:11664 ioctl c0306201 20000580 returned -22 [ 278.410428] FAT-fs (loop5): Can't find a valid FAT filesystem 00:36:37 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:37 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030f9ffffff303031303030d6576a9e19bf2c757365725f69643d000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ec4d"]) r1 = open(&(0x7f0000000100)='./file0\x00', 0x82, 0x100) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0xcc) 00:36:37 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x41, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:37 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f00000000c0)}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x0, 0x8000000000, 0x0, 0x2083000000000}) 00:36:37 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8aa00, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @empty}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x4}) recvfrom(r1, &(0x7f0000000100)=""/17, 0x11, 0x2002, &(0x7f0000000200)=@hci={0x1f, r2, 0x2}, 0x80) sync_file_range(r1, 0x5, 0x0, 0x7) splice(r0, &(0x7f0000000340), r1, &(0x7f0000000380), 0x1, 0x9) read(r1, &(0x7f0000000980)=""/223, 0xdf) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3c677283715451676f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB="00aa2c2edca6a268daf41d18520001558c5580411154f95ecd1190b6dd0dc5b7a460c68c42502ef7fbcc72d7d41256c9857a860f17a7301e3bfbb1bd47143db2a770ca3587aa8a6d3bc45ff377c1adf66feec50733c3b9e9f0a8f1f755fe9e0e91501d49296086241e1b5ac2804669a27eb556bb2cb98d18bcbf0ae61c4cc81378a3461cc04cb810b44a30d9660fa1225108fff252d3c7d9e7d57325da073bc51d898f94f4978b64b6b98919372e7387f87f4b398107fcb2f38d6dab4346e0"]) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) 00:36:37 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x3, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8008000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 278.919627] binder: 11686:11689 unknown command 25349 [ 278.937159] binder: 11686:11689 ioctl c0306201 200000c0 returned -22 00:36:37 executing program 0: r0 = socket(0x11, 0x803, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:37 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x3, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8008000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 278.965228] binder: 11686:11689 Release 1 refcount change on invalid ref 0 ret -22 [ 278.990271] binder: 11686:11689 unknown command 1 [ 279.004118] binder: 11686:11689 ioctl c0306201 20000580 returned -22 00:36:38 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_DIRENT(r0, &(0x7f0000000000)={0x38, 0xfffffffffffffff5, 0x7, [{0x5, 0x4, 0xf, 0x2, 'cgroup-nodev(%1'}]}, 0x38) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='squashfs\x00', 0x4000, 0x0) [ 279.066916] binder: 11710:11712 unknown command 25349 [ 279.078511] binder: 11710:11712 ioctl c0306201 200000c0 returned -22 [ 279.088049] binder: 11710:11712 Release 1 refcount change on invalid ref 0 ret -22 [ 279.099013] binder: 11710:11712 unknown command 1 [ 279.128283] binder: 11710:11712 ioctl c0306201 20000580 returned -22 00:36:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:38 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) r0 = getpid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000200)={0x0}) 00:36:38 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:38 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x2, 0x8) openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x5, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x54, 0x5913, 0x1ff, 0x4, 0xdd3, 0x5}) write$eventfd(r0, &(0x7f0000000280)=0x20000100000001, 0x1) 00:36:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000022c0)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', &(0x7f0000000080)='\x00', 0x1, 0x3) 00:36:38 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 00:36:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 279.745870] binder: 11734:11738 unknown command 25349 [ 279.762555] binder: 11734:11738 ioctl c0306201 200000c0 returned -22 [ 279.772769] binder: 11734:11738 Release 1 refcount change on invalid ref 0 ret -22 [ 279.781026] binder: 11734:11738 unknown command 1 [ 279.788496] binder: 11734:11738 ioctl c0306201 20000580 returned -22 00:36:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:38 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x105002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xe4, r1, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe53f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffc00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000000, @ipv4={[], [], @broadcast}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) [ 279.822605] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 279.828269] binder: 11762:11764 unknown command 287493 [ 279.828277] binder: 11762:11764 ioctl c0306201 200000c0 returned -22 [ 279.828877] binder: 11762:11764 Release 1 refcount change on invalid ref 0 ret -22 [ 279.828882] binder: 11762:11764 unknown command 1 [ 279.828889] binder: 11762:11764 ioctl c0306201 20000580 returned -22 [ 279.854354] binder: 11768:11770 unknown command 287493 [ 279.854362] binder: 11768:11770 ioctl c0306201 200000c0 returned -22 [ 279.855100] binder: 11768:11770 Release 1 refcount change on invalid ref 0 ret -22 [ 279.855118] binder: 11768:11770 unknown command 1 [ 279.855125] binder: 11768:11770 ioctl c0306201 20000580 returned -22 00:36:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:39 executing program 0: r0 = socket(0x21, 0x7, 0x800000000) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r1 = dup2(r0, r0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'nr0\x00', 0x1}, 0x18) close(r0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000100)=""/142, &(0x7f00000001c0)=0x8e) 00:36:39 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file1\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200041, 0x40) chroot(&(0x7f0000000180)='./file0\x00') ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000240)=""/100) r3 = fcntl$getown(r1, 0x9) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) fcntl$setpipe(r1, 0x407, 0xea0) 00:36:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="003cf41fe1fcc341d64d570e455272909ca57dfe1708b3d5a8507b0315bdcf9a944e0555c53f18deb2bda50aa2d69a76f59747d30ecb499ad1bf7214b57e349e07ee33544559fb1072fbc5a6947bb3b9b7e4d007d7d8f0abe718692d4189"], 0x5e) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1}}], 0x1, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$RTC_AIE_OFF(r4, 0x7002) 00:36:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00', 0x201e}) 00:36:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x200000, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000380)={'nat\x00'}, &(0x7f0000000400)=0x54) setresgid(r1, r2, r3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) io_setup(0x7, &(0x7f0000000240)=0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/enforce\x00', 0x800, 0x0) getpeername$packet(r7, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001580)=0x14) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r5, 0x0, 0xff2b}]) 00:36:39 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) close(r1) [ 280.600938] binder: 11797:11800 unknown command 287493 [ 280.614303] binder: 11797:11800 ioctl c0306201 200000c0 returned -22 [ 280.637057] binder: 11797:11800 Release 1 refcount change on invalid ref 0 ret -22 [ 280.644982] binder: 11797:11800 unknown command 1 00:36:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:39 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x8c, r2, 0x722, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3fc000}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x89}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 280.650498] binder: 11797:11800 ioctl c0306201 20000580 returned -22 [ 280.685921] binder: 11825:11828 Release 1 refcount change on invalid ref 0 ret -22 [ 280.695187] binder: 11825:11828 unknown command 1 00:36:39 executing program 0: setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='(user\\^@{*,\x00', 0xc, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) listen(r1, 0x1) 00:36:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x9a, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x3}]]}}}]}, 0x3c}}, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)={0x2a, 0x29, 0x2, {0x79c9a71c, [{{0x80, 0x3, 0x6}, 0x4, 0x8, 0x7, './file0'}]}}, 0x2a) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000180)={0x3, 0x0, {0x57, 0x5, 0x6, {0x5, 0x485}, {0xfff, 0x4}, @cond=[{0x7, 0x3f, 0x800, 0x400, 0x8, 0x6}, {0x101, 0x100000001, 0x400, 0x8, 0x1, 0x7}]}, {0x55, 0x3, 0x1, {0x8, 0x43a5b363}, {0x57df, 0x2}, @ramp={0xffffffff, 0x40, {0x9, 0x7, 0x8000, 0xffffffffffff58d8}}}}) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) [ 280.726799] binder: 11825:11828 ioctl c0306201 20000580 returned -22 [ 280.739648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=553 sclass=netlink_route_socket pig=11839 comm=syz-executor.5 [ 280.760553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=553 sclass=netlink_route_socket pig=11842 comm=syz-executor.5 00:36:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4e, "858b7c634ef43044a5a4919815e9ca1072a031f1cd7e9a77ecb0eb14b1a5bc0d4cd9045a2b0f6c35a2db739e0113a57214cbc937e9c211575c8aa225192ec95c51d34306c89bc34fe46a15af1e9d"}, &(0x7f00000000c0)=0x72) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) write(r0, &(0x7f0000000100)="81f3c2e957bd6019", 0x8) pipe2(&(0x7f0000000000), 0x80003) 00:36:40 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffc, 0x9) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) truncate(&(0x7f0000000040)='./bus\x00', 0x3f) sendfile(r0, r1, 0x0, 0x8000fffffffe) 00:36:40 executing program 0: r0 = socket(0x8, 0x5, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e22, @multicast2}}) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000080)=""/19, &(0x7f00000000c0)=0x13) close(r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @empty}, &(0x7f0000000700)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000009c0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @multicast1, @multicast2}, &(0x7f0000000b00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000cc0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000e00)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000e40)={@rand_addr, 0x0}, &(0x7f0000000e80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000f00)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000001000)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000001040)={@dev, 0x0}, &(0x7f0000001080)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'ip_vti0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000017c0)={&(0x7f00000011c0)={0x5ec, r1, 0x201, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x1e4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x0, 0x0, 0x0, 0x101}]}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x134, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r10}, {0x4}}, {{0x8, 0x1, r11}, {0x138, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3fc0000000000}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r14}, {0xd0, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x27f}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r16}}, {0x8}}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x20040080}, 0x1) r17 = open(&(0x7f0000000200)='./file0\x00', 0x80000, 0x5) ioctl$BLKSECDISCARD(r17, 0x127d, &(0x7f0000000600)=0xfffffffffffffffb) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e22, @remote}}) [ 281.428404] binder: 11849:11855 Release 1 refcount change on invalid ref 0 ret -22 [ 281.439387] binder: 11849:11855 unknown command 1 [ 281.444720] binder: 11849:11855 ioctl c0306201 20000580 returned -22 00:36:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x1, 0x8, 0x1ff, 0x20, 0xffffffffffffff9c, 0x1}, 0x2c) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000900)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000940)=r2) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fb6b070059d74466a474b82dff05c29c3341750f5e8df309d9a9127810030000000037000056b87f2d0bddaae122fa75a2f36fd266d8e9059bdbc367cb5bb5a8a986a196c8516d577e12bf1a01004000357c531fdc02daabe0b57c19b3762725f2d551d390cc1ff600b9"], 0x6b, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000980)=0x200) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000009c0)) ioctl$TCGETS(r3, 0x5401, &(0x7f00000000c0)) ptrace$cont(0x1f, r2, 0x9, 0x7) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x4b8, 0x0, 0x0, 0x120, 0x2c8, 0x0, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x4, &(0x7f0000000340), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast2}, [0xff, 0x0, 0xff, 0xffffffff], [0xff, 0x0, 0xff000000, 0xffffffff], 'ip6tnl0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0xff, 0xffffffff}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@tcp={0x30, 'tcp\x00', 0x0, {0x4e24, 0x4e22, 0x4e24, 0x4e23, 0x13, 0x1, 0x40, 0xc}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x9, 0xb3d, 0x1ff}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], [0xff, 0xffffffff], 'vlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x32, 0x8, 0x4, 0x4}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x73, 0xeaa, 0x6, 0xc2, 0x7, @mcast2, @empty, @remote, [0xffffffff, 0xff, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000], 0x400, 0x1018}}, @common=@unspec=@connlabel={0x28, 'connlabel\x00', 0x0, {0x20, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xffffffff, 0xff0000ff], [0xff0000ff, 0xff000000, 0xffffffff, 0xffffff00], 'gretap0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x3b, 0x4, 0x2, 0x20}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x7f, 0x200, 0x0, 0xfffffffffffffffd, 0x6, 0x80, 0x830}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x900, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x953}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x787c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) 00:36:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:40 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x8b, 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, [], 0x24}, 0x4e23, 0x4, 0x4e20, 0x7, 0xa, 0x20, 0xa0, 0x3f, r1, r2}, {0x6, 0x8, 0x1, 0x8, 0x2, 0x9, 0x0, 0x4}, {0x1, 0x7f, 0x0, 0x4c}, 0x9, 0x6e6bb2, 0x1, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x8, 0x4d2}, 0xa, @in=@empty, 0x3502, 0x0, 0x1, 0xda36, 0x6, 0x81, 0x4}}, 0xe8) 00:36:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 281.506174] binder: 11875:11877 Release 1 refcount change on invalid ref 0 ret -22 [ 281.518366] SELinux: security_context_str_to_sid(useru,) failed for (dev ramfs, type ramfs) errno=-22 [ 281.540007] binder: 11875:11877 unknown command 1 [ 281.547696] binder: 11875:11877 ioctl c0306201 20000580 returned -22 [ 281.603491] binder: 11896:11897 Release 1 refcount change on invalid ref 0 ret -22 [ 281.613456] binder: 11896:11897 unknown command 1 [ 281.620885] binder: 11896:11897 ioctl c0306201 20000580 returned -22 00:36:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, &(0x7f00000000c0)=0xc) recvmmsg(0xffffffffffffff9c, &(0x7f0000007180)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/7, 0x7}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000700)=""/133, 0x85}], 0x9, &(0x7f0000000880)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001880)=""/232, 0xe8}, {&(0x7f0000001980)=""/177, 0xb1}], 0x2, &(0x7f0000001a80)=""/142, 0x8e}, 0x630}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001bc0)=""/196, 0xc4}, {&(0x7f0000001cc0)=""/102, 0x66}, {&(0x7f0000001d40)=""/119, 0x77}, {&(0x7f0000001dc0)=""/215, 0xd7}, {&(0x7f0000001ec0)=""/131, 0x83}], 0x5, &(0x7f0000002000)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000003000)=@tipc=@id, 0x80, &(0x7f0000003380)=[{&(0x7f0000003080)=""/79, 0x4f}, {&(0x7f0000003100)=""/93, 0x5d}, {&(0x7f0000003180)=""/60, 0x3c}, {&(0x7f00000031c0)=""/125, 0x7d}, {&(0x7f0000003240)=""/239, 0xef}, {&(0x7f0000003340)=""/5, 0x5}], 0x6, &(0x7f0000003400)=""/144, 0x90}, 0xd9}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000034c0)=""/158, 0x9e}, {&(0x7f0000003580)=""/122, 0x7a}], 0x2, &(0x7f0000003640)=""/36, 0x24}, 0xf8}, {{&(0x7f0000003680)=@llc, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003700)=""/6, 0x6}, {&(0x7f0000003740)=""/223, 0xdf}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/249, 0xf9}, {&(0x7f0000004940)=""/138, 0x8a}, {&(0x7f0000004a00)=""/36, 0x24}, {&(0x7f0000004a40)=""/219, 0xdb}, {&(0x7f0000004b40)=""/79, 0x4f}, {&(0x7f0000004bc0)=""/242, 0xf2}], 0x9, &(0x7f0000004d80)=""/139, 0x8b}, 0x40}, {{&(0x7f0000004e40)=@tipc=@id, 0x80, &(0x7f0000006f40)=[{&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/92, 0x5c}, {&(0x7f0000005f40)=""/4096, 0x1000}], 0x3, &(0x7f0000006f80)=""/71, 0x47}, 0x800}, {{&(0x7f0000007000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000007140)=[{&(0x7f0000007080)=""/61, 0x3d}, {&(0x7f00000070c0)=""/107, 0x6b}], 0x2}, 0x4}], 0x8, 0x40010020, &(0x7f0000007380)={0x0, 0x989680}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000073c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f00000074c0)=0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000007500)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000007540)={0x0, 0x0}, &(0x7f0000007580)=0xc) r6 = getuid() sendmsg$nl_netfilter(r0, &(0x7f0000007900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000078c0)={&(0x7f00000075c0)={0x2f8, 0xd, 0x8, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x1}, [@typed={0x4, 0x85}, @nested={0xa0, 0x48, [@typed={0x4, 0x3f}, @typed={0x8, 0x1f, @u32=0x24f3}, @typed={0x8, 0x9, @u32=0x8}, @generic="8effabf846476cc4260ce174fc500e0efd51f5", @typed={0x8, 0x5, @u32=0x6}, @generic="f2c17f49a632a1f2e7aba2fe165b2e4c520a40ae354fec34f5187aad10ae18b2e91f429a206738ab5664c9cb6d19f43dcb4fca466398fadbbd56c8d0643e5226f7423722dfceaf", @typed={0x8, 0x5e, @pid=r1}, @typed={0x14, 0x40, @ipv6=@mcast1}, @typed={0x8, 0x32, @fd=r2}]}, @nested={0x240, 0x17, [@typed={0x8, 0x8a, @uid=r3}, @generic="61c335df5792adbb310d179af8e29f581489e6b7619db5343eb3266feb7dcb641a70a1706cf33d36db13e1a5425b5a5d662af8ad578b852ce6ab22093e250bf39e7d19815e79cc09d1409fc14b1ac1fb90c7a96531453686618e03e87c05bffdca262f75915c5facaccc", @generic="5245359486bdccc379c7057206fc947f2bc27552bf25e1dfeb4df36a9ac154ec367ba6636cfd625a45740b8a7b7085f628b1df710fb958192f431c565aaa488e4c2030c7", @generic="f110521c74108809f1c7fc18a3f68bf197c779218801b59706ee77cbe0d229c794e44b96d44895b514d313ea18dafacf3221f97df3c3279172f781a5c5cdf51793a36dffe346e99b158f62c6a831e9e4da2912b32268f0f6727457b3b21458b78f6ae868cc2062a675217aaadf150b90488dabf88fb46503052a3459ae", @typed={0x8, 0x6a, @pid=r4}, @typed={0x8, 0x71, @uid=r5}, @typed={0x8, 0x6d, @uid=r6}, @typed={0xf0, 0x85, @binary="a95a7733332d253d3d59c64b9ed9b90c6cf83880f9f30db0f4584af6325ff43efcf3ddcfae02d369b5a7e29a27c4aa827a5ec188b8dacf57f6f4e85a481082fd3207704775a8d8b6543712492fab2f8e03616b4444895dbe0bc96d83c913348b67413b714139b554f9b48cd302a5ce7b7f67a901a05ae271c68d5c2847b9aa2f714e81e5454ec6ada45e65296657300cbb772b67d02fc223b334c1b47323cb5627023031620671e26333da696b3a32cbc288cdeb8792b12bc51e7af0b11bfe81c7324902c347bfa794ff2f79a0a63ed5ffb9eeb12e452636e1acd8aac235a3bb09a86bac2ff0648ddc"}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r7 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0xd5) 00:36:41 executing program 0: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8860}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r2, 0x31d82a8c31e3f58f, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa47d}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb6fd}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x408c0}, 0x800) close(r1) 00:36:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000053c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000054c0)=0xe8) sendmmsg(r0, &(0x7f00000094c0)=[{{&(0x7f0000000140)=@ll={0x11, 0x6, r1, 0x1, 0x174c, 0x6, @dev={[], 0x1c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="63480399eb4cc430b5046e2626db52c3cde31b41e148ac3ad5760fed824c679e9922a26d35f63ea0e3db581f74f27b0c768b5f79db2411cb573578eba01a315f039dfbabbb0d532e0b235d0a9ad471c20d4721a1aa8d4c7f64c811cb0be9ff14035eea2372c5fc49c00809e17a90269b35fa960491fcc64449928161fd38c016cb4219645fbf04fd3dd5c91338b5e1b950e016b44ddd06e013626945dbcb0e477bbbaabf406f7c80df9959df48d911e6bb6e66260588cf25", 0xb8}], 0x1, &(0x7f0000000280)=[{0x110, 0x117, 0x0, "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"}, {0x68, 0x10b, 0x9, "19f5166128627faaad1f10bccb9dcc23f2c199dda0a684a509ab2d4cc8d87e7f0a2a4fa9494b6e8ed5d5b106be11b7c850c9c41ea963f6277b2d790b61adc69148d1f28a5e24d97100c1bcaea1f2d3a6a3fea3bdd8b4"}, {0x68, 0x10a, 0xe0000000000, "468c1bffabaf9313050981f7236fe197d85134526c75d17fdb92118684eebb84cfbb5998c620c91cf0e5e0d667eb66d93c32f0d23a4e9597b8e617ba84106b4db8efd919a0f97c930dd27aac8ebebd104ef1e6447d"}, {0x18, 0x117, 0xffffffff, "88"}, {0x68, 0x112, 0x1000, "8953111a4f673dc0eaab811b18fb0574522565b6cbf0873bb94300a495efd57dfcea7334caada547e04038b1b760bc8adca467b0dafd34d570794bb7495451b52c2c6a7be30a6d240efaa166df5ba8a3532e80bd"}, {0x1010, 0x111, 0x100000000, "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"}], 0x1270}, 0x8000}, {{&(0x7f0000001500)=@isdn={0x22, 0x101, 0x1ff, 0x0, 0x7ff}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001580)="037239a060011fa5b4dd8f6ad55defeba043df257ba0953d444c0c7dd53dbbdd58a5", 0x22}, {&(0x7f00000015c0)="08a7fe32a6002f008ec92f7ca0e408736024d7456c9b048e140998240a7c1ef4e9cd1f88a001951fe442f855e07d132ef75e28de864bbbd6f7cc1c5bbca9ed1d2a6a2ff9952395f31d48fbc74465ad8439862d1995ef2220dc52ddab3d8c8156a6c2343c1b86ebea099d2eaa8ce71aba5df720ea4125b14e08bc99226c28823bf9acff89b2591e61ef3cba2dbe88d5e7e17426813618d1a674da23eb1f289b618d4308cfcf201d59f22cea25c67a8d0399883c5c268d821d388b45fe7a17c2a01e7f596cf7a6fc9474841f03934319000e47d906f0190c034d5227669f", 0xdd}, {&(0x7f00000016c0)="2e7f0e7b9ca5746fa986518f2a8fba5d30f9206d900e26dfd3ab5782f5311539a2b974c852fdf9e1aeff113a2f9c9e2528f3c022ce5a88d85202be8e27114ef35492cb12bd8e366b5c99ff95a9293c238f72cf0ca9cc85f447e5cdef73ff284e8b5fe402befbac3ec0e670789adc2ac1a89414a7b5c490e0e357e2daa8b555de311d92224e7e68add8", 0x89}, {&(0x7f0000001780)="8e8cf3a8879c13d3682f0efebc72f30591a8cae275a12c8077402d0a6bda16bcc1f89e5d91dffae84239a39af9f9ca908d9691e3f406f143", 0x38}, {&(0x7f00000017c0)="aac6e1419d269c50ddc46ef6107acf404ff5456f888e075d16eeee4623216719d3ab0897e35e1802410c99525bcd9cf5ea4f6374600fbad22c831c4d18759b14a9a54aa86131739fe8aec29b5f5ba09524740f0b54e0f71ffcf3db3515f75ff03705510606234a81f3", 0x69}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="f66506ad377b5c9612a90f0b20ebb550797ad074f9164964a3b6ab6ccce1f6a7ff0eb3eaef6080b6f6141a2ff54c1616f8e9e80a482e0d3e741e5593cdae279baaf772bd43139f3250583569d875537c316a35d63d9aca01c9c38f00c7643fdd87cd85e26dc6b6cee2155e63e7a6410393fc5daa", 0x74}], 0x7, &(0x7f0000002940)=[{0x88, 0x6, 0x10000, "017740b65461fbe329285b71bb6ebaa87f532cf394c761a1503d438792a12837f54e5777fb49dc5254954d005cd27b68ee3173f762538ad1be32608bf5f3fb8aadeae28516454c80cd6f57b00fd0d1d6a6fa6cc8771eda4fdcf00d54a3bfacd4b651bfb9e3b1f58a5251d7a0118f1afb340b"}, {0x50, 0x115, 0x100, "a5f33cb21658b14469d14ff348c0409e1404a191043a109d09e220040b07421f1f80c0803e95f5d69a1fc3eff95e8e35bf2068a8b6a43893abfe63f4f86d71"}], 0xd8}, 0x9}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="a57bb3d2e8a72048958ccea4b6c3000665ad97ade7841f167b2cebad13c9ab55ed49ea553a2d294bf6d42ad624674cf60ee99159ddf5ed208f01e373093e13ff855096325299752902bf0449fa1a614bc57b2feb0cb61e893955f57fa457607177fd90babb9a258406be421edcafa328f2358ce957b0e2b78bb54bbe9b4e43b532c8eaec", 0x84}, {&(0x7f0000003b00)="0a9d8249c8465bb4ed2d6a27", 0xc}, {&(0x7f0000003b40)="db447f0b70f8ea65", 0x8}, {&(0x7f0000003b80)="18cbe63f580c99b3bea006f5ceef611bfee97cc90a12e317309506202e3225", 0x1f}, {&(0x7f0000003bc0)="c8f9aeeef0c4322cf61db534f187d301852547ba12f700a1044931a3", 0x1c}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="fb18ad542cd1ddeb19f85bb2b8a0e7edc97907862ee3140084820e3b490cbdd806299ae07afc320bb6bb8dd93a17ed4a825a2bcf85bcfdf4d4515bd3001192a0290735401a2c716ac6f46d5475a462274fc06a85c47f7eedf53aba0aa21b715d172692633a4992f131f5902a399d1d5cf790e728c9e179109e4a4949615c35a47ce8b0547a1383b571a1f29790a060fa45dc0322eb4b939ee9b8bd307a8c23d254c91a3a4cf0cb06fe26789adb8b90c5f2a2f06847b5ce3d03ddcc6818295f2d1af2de64a6f8d87ee8101f590b83", 0xce}], 0x8, &(0x7f0000004d80)=[{0xb0, 0x117, 0x2, "12c6253821c111cd0b84ff3d998f75cd7e61e597f35c81d5298828d3c7de4495bc3d05217aebd3f7596f5109bfbb6dc8bdf90211a8d6b2b0014d1236450c330a59251804b1cf8c9d6e39824cc7cff185e0a241b6435978ecc44a801d0925582ec52f3dc9644f3a1648c60250afd8f7cb2b881437645d24d5b3c4d5cb1e7cafcc7052b7439a98fb401afea135ba83745e844acf313cda6112642bc5bdfc69"}, {0xf0, 0x109, 0x401, "280eb9ed60f7390a5fa3e45be67e77cbce24123fe9c091fb4e94ff5eb65e1e410d46721a9c1f3c349658e81e4cec3386ac59fe08c444d2fc63f773532acd27548f155b1b61ec0929fb3c49879fb34f3db22e5876f12f3c64ec51ce390995c93b6aadc73990504a771eb6d84b2e28a6fac27f2ddd0896b0895a746a858e195f2eaa700614ed1f7a0892a017c78139b055c85f0cf73345732e865dd73bf4440729c63517fa9852f818eba342f64d6e348021a0904c036e40918c42149d5cf2a1fbde83f170aa187d54a142a67973ea2b21cba272e35822345f4e"}, {0xd8, 0x6, 0xfff, "792f686d583f81bda11f2a242eff26b8c9bfbd6a4222d55ad7badc0e96377c788a42f9c7f68ed54e0a8eb827d61de20b4933f84a9d00ccec902698a43d38eb07ad3d35355d75e4bfc93c229ec0fb3cacd5a6c158a6f3700eb0af277c199e8bf398ef7d6f1ac0ee043b539609cda0b3a565ab4d655f9fb83238f42d63c167a0f96988bfddc5e796ab3d2c8015ce089680f7c0cad79bf10aa166687496c5c97e5455a2723c1a20660c76f66015fde873e3e15637a367c0bb0aa5e6e0a82d47481d178d50f7"}, {0x108, 0x11, 0x0, "5879703f3665be3d23c403071b79b87f5f3a1fc2d1eda2762435711e311b2a24b24acfb43fd4ba59c3bc914c6b439a72d4612d5021e02e615fffe603c2b49eb9c8f4fbf784888d855cf050493e8d64a77ac6f6a94e9f60acf8652fd2c37f278fb340a1d1b9082904c0f2248921d77e2926cdbb02145e815fd4642a1066da5d7a085668b77aae87eca0107dbb09562140f5b5c021342b0b27d7304a70c2145242d69bf4b249f8c1c20d9ead37a62cbf17878e149d9eb6ad0844fb9eb0afbffb88d3a789b9fa830e72c5454d095c6d8e5c4023329f33f56130830f578d99ef21f0c4d14398289fd5348d7391da9e4af02b5803d5d0"}, {0xe8, 0x10c, 0xdd4, "85bd394c54f13d486739b7dc043cab83bc920ac189ae8474156ff22cad163b38ad3c42b6735b4816e1aac48a7e60c69b2ac738ee2e48675a708b3ecbfdc10bf97fcc9573c44f678c399af42b0aeb7bd4d1c28d4def9d7331c8533ebe7ebfaf0537c7ca64eae02ca2c196c22174bf5daa8124ebb94e0daa6caa39660eb442a2219c0a25de3773add86f2576dc610d6b0c69cdd0971fe706c76e5db29de62e852067ae7f7fdf9f6d2efd3107054cd1ab8abe4f2537ac10ee4f975ca83befce02dcfa92d74796e953add4308cc54954fc3473da54c7ef2fe0"}, {0x70, 0x8f14220e87944210, 0xffffffffffff7fff, "8c9b54a092bf07b51608bf7bb76a321698b9962291afe471a71791dffe69801e50dfd198e4804feb58e5fa777f26c10c31b724df1277e35c190bb4193c89ca8b6049757fb7d55aa044dc04b60192e528b075687dee20bbeb935dae0e0ea88e25"}], 0x4d8}, 0x80}, {{&(0x7f0000005280)=@ipx={0x4, 0xfffffffffffffffc, 0x64, "6ce0dfd44e42"}, 0x80, &(0x7f0000005380)=[{&(0x7f0000005300)="5a37363e0f3f568a9b518c5651d832b5f43d9fe30ff450d82a8e08676d283c86d1514eb57782ca5b46be65d50dd85628389100c7330164c4551fad6d63b8bea7f12a4ad5ffe75d58ce1e3f4b66942c04cb8473615fca6020de3f", 0x5a}], 0x1}}, {{&(0x7f0000005500)=@ll={0x11, 0x13, r2, 0x1, 0xc62, 0x6, @local}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000005580)="85ea02821b0859df5a6f6ab32ad75ac734d0c8561130be9f1ff39c0737cc5823cd3795300fe7e0b8a1013820451ba37c692d1cd351eb764cd74bdbbdc0ed90cd85d6456f4ac134a0d6fa9aba85fee403dc0fc9be05dcbfb6b2e4df930e58b26170713826493e7d740f7be93814000450a0f2", 0x72}, {&(0x7f0000005600)="18639b6658038b723823f106e7f80871736feb4c820cfef799a338fb9cbc3355033a0ed62d3f0772f563d7f8670783925d4834", 0x33}, {&(0x7f0000005640)="1f9625f20ea8cc8132240cd498f68fb2b4f393df35b6f67c25b0da4f0cc7b1c242ae4be20cfc564e788ae21de283b61a6fece942bfe7a8ca990cb58f94", 0x3d}, {&(0x7f0000005680)="cc6054f0b84d89dba2000bb337d35b73b1b67c3e8ade48712646656ea3d2bed7edcb729ab1a48cef4f53c792182e80a616c41827f223dd0cb824130db831f63b33f18a7a2d5459fdde840c1b5493f6c82850269ffa0178b748ce7f740e39d0243b4a5b42315f44ddfa865281af58402db1533f9407948cf33a661d6d9eb51b65fde3ee2a4b45f0c0237f2e38f4f3363df669cc", 0x93}, {&(0x7f0000005740)="17d6b9f33ecd7cd7ef238febbbaea3a8dc42984c4d7826edde6834ae6c0221261c58a8c7b3b1491c7fbb65d9221d7a52298bb32a81b08ad1283b00da7f8c2d8e7dc3ee1303e023daf8536562ce2ad4011151b45cefe98e62524c13cf059cbb3fb14a8b", 0x63}, {&(0x7f00000057c0)="12335ce0a87853576afc6e7a1ce8c22c125e8f1552323561c90e75c16ca3c83fb59b98b1925f23dff74886399c711c6555002a8cf62d17d82edea85774c2b4265d784f5fe5ecd9c769af09a71f271c3db66dc7e2e14b3ab28c2c954c9c855211a63025c53e9f6ca734ce429097960aa2b36748fd29a7fecec71b62c6f902df31db1fc2f45789ad06c8d75de2046b24bc8c9152239cca3c12f782da20cf0a5fe7daf52c5782110c488f1080ea27a4698ba4c8b2ade37c7c883379ed4b8c5a81ee4e208799ed32926fdf30f0da5d848669642dfb12cabd8b848eeb8a50d5f2a7f6c005bb605001decf2d1feb57f607769f46", 0xf1}, {&(0x7f00000058c0)="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", 0x1000}, {&(0x7f00000068c0)="acb47bdc2cdd3f1b3ad42d20261c4ad34560d37d3c26179b6ce00b43c4498977b9a7b30dc467af21a9e8f7a1c3f9130b1185de5eeb4a163cf138ad7ba61ab442732dab5adb5a3e2c7c4741c997cf54daf01f8a8db8e4a0f138b41d29fa64a033cf99f48da70b40730982fcd62472154cb6b6c51d5610de9d498d685882c18cf1c8b27979ee13e4ca71d22829e94424ea84b7e55467f79238e10a3c6a345d5dbcec9a77814dabeb114402712294676d2219f04e09e7615355a5f72189c5a8b2d16843984eb6ae75fd6dec48", 0xcb}, {&(0x7f00000069c0)="8d1638c3aa2e7fc27d0e22cc3401a66027db5b66120d2fe5dc5284848b8d881ec234dd6722bf86c6677d94c8898d393e8e55b91c44c5d3426e155bb78343356edf5d849dc9ac1e2d63dc07b92623a543dfdcf0efde292476678afc28a73c23e4126132e42d3716cd1c43a33ba794d6446405417ee3824d99f486f91afa8b1820d560f037820b09b7cb00176643a9b065266567e9652ff4f6fc3f55fbc0f293429bfba6539087fcd4803dfdb97626", 0xae}, {&(0x7f0000006a80)="4189414221cd0c8e395176320957c4", 0xf}], 0xa, &(0x7f0000006b80)=[{0x80, 0x11, 0x9, "181cf6b80424f4408802e489bec01204684d7da64383e7e343f8771d94573e2bf1f22ad8970e2bce71159ec4878c62fce51f34bb1de094a84fb5de322f471d51b3c7a558df7ada753144e6da8c98a82e21615258df4649e52500117838725815fa15653a8d6b4d80708b75"}, {0xb8, 0x0, 0x9b, "606cbf2f9eeae8a45b4744c2a30a949c012ae66dfb5b18ce1b556388c124317a85333740320c1b3bcca83dcc4a649938ee92d0e6b583b67bd121d44d958e023be7fd53f53ab0fbe7b5db739c91afec81156b14aee849d306d5458669c6fa386cc53b67a1550b91691f613f843c1cba55a35a6054efacf62925f55b3a1f25b721c767a02e6be3487f72fef1d9240c07d2c26e027d9ccb8a0137cc34afeb4a93f4447ecd40e6"}], 0x138}, 0x5}, {{&(0x7f0000006cc0)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000006d40)="16", 0x1}, {&(0x7f0000006d80)="4ec4f0ebc7267d61d119ca5568e0c1ace5930e223ec8c2fca019457b9d0cca426431bfc998", 0x25}], 0x2, &(0x7f0000006e00)=[{0xe0, 0x10b, 0x3, "e1c06673abfc897c75c9378e7cd35ca75b9c8a57ecc92609167f66675c7a3479e8f8ba75dd14e75590a438a8703020cc60ab586630786a3b9b4f5709e8e8ff8de1984067250f5fa0c05836c5eb0c9976a0115257ac1d004b435bae0d8c23e4bc582cc22737a8c6569f391ea90a700d711ede1832dc4c25dabffc692bada5d6295ba4658b18bd968e91c79e62694e7eed39d09176220cf09965cc8a317e842af89fabeaeec8606a42996d8a0afaf96df70944790b3568cca2687b76e41412affbdeaaaec237e3c4d1f23523c1"}, {0x98, 0x13b, 0x3ff, "af8f0712b8d3b4b7b3474cd3ad2d3f566f8d3550af9c4eb2880b3161715611ef37a5bac2ae22fa3a25710b3115fb0132fcaf24b8dd914053c8a866bc626713e18875ccb1291c74568805fc9e9b227a5bc92238ae99a70c5b04a7446cde0050abfa4291ef3f40bc111269bcb0a961c82e4872079952e05d81b7b5ba6d9bff7878e6"}, {0x38, 0x88, 0x2, "e51077709dc84428185b6111204c219ee3fcc1b39e0d0e9b054c138df51b412f22842a50df205c"}, {0x1010, 0x10d, 0x8000, "e8c703876d800ab747fad987c2bb391a1fbf81bf11f6f3a0249ec447201d0c091bb9e77a82631df36254086ea2e7eee43cde4d7e7536454b03cec94ce33332ba60de60a2bcdac602531ab5ae1a84b28a8138799548162f367d9c1c3329b23826f8b9351119dd90b2ed7b2650e9543fe04dbce90634b673fba9339ef1af569f6ee333d5144fd9200ebc9522de2d04aa7d21a18c61a6786194d8a67e4570535b657f5ccf5feed74476765ba4ac754a22e178a842b4ddba0c2a2cb85329b3f702126f5976940f08d97a444f69d9f681ed49e96e5c20d48381688991501951dc8e4d6df2a516b13de38e3975f875dcc6d68b6cf2d36b6dbaf36b7c8cf730b690872c6d134f6c02f49dfb09a6f7d3b9ba6c947ff56079277ed2626464fa24ca1e6947a643a33d183eb81ad8cd651be75a3cb5138cc75899617b4fd0af7ae32e9e511992e2b577da199bd064c06457ddabd19524ae5d4edb8d6c3c245f0a4f13e60ee30905627134f4011dffde065fcc963c4320f1262d1b5e579be85547c9b864cb23f5606ce5e4de6436328cf770e4e57a6115304c557afd3c8ece418ab1357d65bd3f95233bf1ad8b1a688c5d318dbc270892beb33eed2427f312c40e2cb7a6ac943789977a5a977dbb4d26f3789bbf29170e718c734433c1b70b85a232815d3e4fb0fd50e495a035aa84fde7d91e4d7b2970e74d6e38eaeb7c3645d1fc1d2132b48cbc9dceadffaa32ac399d0a9a7341318e354198df098defdb6728af8974270893f76d4771371b9a8b749f584cb02ee1b8430ce866319a1a2bf81a86b9ca56fe68b29ad5f49fad8fddc6cabb1350237b69710312d46efd336898b9c78eac3fb95c2735cacee644b337fde6cc0a4d012ea38ac57468289425bcc326267dd99f58fd086ca9903852baf0f1c4eab1a649080243dfe21b292a6704fcd8dba3179fda3f75d2083040ff90a883efa436e807e7f6b82b6b5220e408b685bf87e3c6e21fc1c8d0cd1c7dd6156e3914f781f787f951218fcb30cd9226eeeb18a2cf3b2e0c4ae385dc4c64427e4c2e63d0362bda60f13d5ff65df7350d510243572d7ab2fa863f473c457c6162d7daf146474002aa5cce717a89ba29d6ebff6351019c85b08a05ca51a1b983d23e44411e3176bd1177ef1841caf2a0a42bdb8df135dafd9bd35d5abe2549bfd490246ef74c8f56c3f03c1d078fe70a2a1bd5f6814c9a7d908eb9de0506726907d9606b7281fb40beafbca15d49a148a8183122b1ea7495a77146c8deb320436df321de0d81b98eb3e4c460050b0c8822696ad4f28802bfdbebb7bbbafbb7f98e286954b68675acc4899cc4ae969d7d23efb2d3038b45cb10ec582a605f533ee3e7bde48c1d20090311e8f5ec2b7319bf6bb602cc5c4c1b7d5abd0673a99404c5b2e65bfd874a9c433c9739ffd989f210bfd7e0994d9ce919f6147850a4e8129d99ae34d014548245b93a7e34606c707326e506a9edf3d43a34f448cc12067577fdde78fe102ab4942217790e8563708f57e177c37c70c66d0fc7d4aee2ff9d24a213b5ac3fb0046d8321cb92a811c5f51961218c187f43e27f8e0acb07391ab763b8e091f48dcb0bc6d052be0e9461446e020ff5e6a903d3b61c041294643bd41db8896e6219554deb7d2e2f0f4e3b6e650da897d7d7b8f6667e9a54a4b99b66e83326e743ac7d294deec98f28f9eb6126e230e262c62e08ebbe679394da50b421d67fdd518c736f9bb2cd9288f479fba60de46165bd78060b7d9186257d2e09b02fa0b373a5551dc1399f229cd3fc08c28bc2ff142724dcb90f9f6a3fd81a9a94af7b16815583dfd22180cb7189f1c82259361796f774430d89079ab23782dfad3bdd88a075ec265bc4c07999a52c63621581483a3f37ff78a7f4c573c7e1bdbdbbb1aeee57d0b8aa6ebe31a5180cee27e56be226f1aa8badca5d100f09739dd00ba868cc1b2aa0b1f1099385311006b7c60ae12d7a3e56119021f3779267a089af20416ca4bb7ac3ce5ece05350967afaaa9be495fb529aa463b5478cf22cb92d404f5272e9aa9328386293cafe3b73cdfb57281c03c0ce22bf3d0019101c4c19255b2dda384dec58d1cb034dd8369e544886a52e634e4b5649080b3cb616d1c851a651bf4715ccb6c839c92ae9f9774842129b5338140d57cf49bda9662257216414974c0ebae787dbd3507bdfc094d67b3075b4d657038fc81e01fb06cd88607e65337a0fa852c0376320ecbf6ed96b0083ad4bbf247e462376a0d9d6bdf4abe130892d6827496b1a7cd4f65d8a0949d54ff4ad871c6cc23bf6319b7b5a69d5bb67f36a83763c52bffbe7d807d9a83d6b4955ba1555e95fabd1b99faa80de52fc51b0ce10f606d8a9fa756e821be8200729db13211ca42977c41cea259ab7b6556e86e4ecc384a75d9e4663ec43b2cb3601d746b101a373d4e8e63576746701c71a9004ccc03dd34e9026563d66fc7d1873c5be1773afac99fb11570b1a0216fb2ea83a8332062e493a0cfee3ac77ac41cf23cd3ead7db65c128552e1488cb9a6c65d5335cce2e9f0c1c95c5f88807a2f9a40fa3c9d76de010521058711ee0cd450493cfbc0022068f0ad498ab13e56a694c11b0a70603bd899bb03cd5a61c36647bdf2ad9b4818384d43d09a62d6a0cbd2730b7b23c83361ce7a669006d5010b4d654cdb843e74def31ec0b80d800d3734d76abec45edccc6b1f5ff5f2ad6615f550a47c7b122557357c1c65e0b236678ff5a44e187086150126f38a5df7a34ae61f481ebbc3901c92259db918191e6477cda18d97903a885e8eddadb9447d41b2d389e0cc10b41d1d4bf745e1e0d7afe9e243ea3dd94fe286194cc045f1fe813f3e0175c3b085997a5e61ed7614acb2efc4938d1dd669e390c6ff1b9cd9c7fb94420d67d1d5b618ffed739e65068800ced2512403ffa22700eae968aba1a5c55d64793818e648991452f93c15762683897eac7b47265b38642d53605c79800cf8440820c7272865a1c4950d4492b3e601aae616aae30751f5f6ba02e1944ac5632e81b652bb9416b23a4a3734ed503170f24ba3ef040692e0ee158e306dfe627abed7131184963ffd47dececf5dadf9b3311fd8fab135abf81f52ca5a8c9366f0bd5dcb87739af2fa07847d9397dcf33f93a6647b8e0f964e3d90e812edc47657e25127c9ea5026603686b745e6bfb6a77ce8dfda1bcc95d6ace6881434ed2950b80339f106833a67f49b68b86609285c426f2e29ed2859a65483fca52c6a1b49d4a16711b523f83a04a342de681fd9c2eaf30f1b45baaeff3553e80566dd92a0c3af2151d73e425d5718406518ba298b1b8bfce7c57043aa7b5e134e3c71552bb401de71657f853563110fe808cb5f20b582a5ae8d734aeb04b5ed89fe497a3364d0b30994e3c91b424632836bb3d5066d5b2f2d20cca937c7b16c1531c1a07aadfe1bb60f6cf7303a78c6bc9704832385b947734d6d2feaf115293092c3f5b7a5deab1102f982ffd8a9c5a0fb5875e9fc288183cad5596d50978b5294931a688c7f2a92f05cf2a50ee5ae781025094db291157696b6bb45c02c8954bc0ca5175be953f20f62f201e312d73a4aac6d2ef4f61bba872b84615b7ee9605ba0ef47a4612ae1b9f9ca7f340d9c05b380d1e8fb6249074c3d828707a25c974bb9d2ad4ccbbf2fdf62c7eaf67b45c8dd16b784e4bddd0a91c9c45b9a176e326399f9679c814fad7d5efa920c58c437faef5119cf411fa4eb59104c347eadd9a0046f912e2d548b549663285ea32af4120f185c9488d4a2abcbe4a3f4bae1d4392111498f95640565b9d0fc3103d6e23bc54b2f172935320137d124939ad5404c940cd72bb6806eaba30ef47ffe59cbf488d590adcc899e2854ff79a9db9b59ebb0cb946bb28b4d27d19783b787dc78a2d6141ca4205e3e99833dd0ba9d261c76729fb824d5b29a0cc6a403148efbe702a5bfe62734e41527bb6b0164bd6d53dda1ad1a8cc07d9f457a159be5d902813d5ee082fe08dca8e14047f8101c2089da29e8b43a132c335762adb91dcef8435702514f862ca5caec653974d17e8f8aa606777f982ebee38ddc21b8e702cfc44b8be63bd6baab2cc5c6f54f16090df092062935cb3652d4d8d38314ff775d05e979c74a943d48aa35f395a88c46a891c1a4afec0bb5eabbe0ee193bcc45100a9e62bc2cc57c8d2975a9645c5a5442035390f0ff20e5aaaab1867d44359372de1b9bc4c269d1550de1f68e13ba6d8858057ebc3a6150c61e71e17041bfec6ef71dc0c728ff8adfac19d1196f4513ad0e3a4340c20abfd65dab90b368598159bd10f9a625716c58f0073ca1a5183dcf9ebb085d65c4d245e71eaaab33bb2a5e68bc538ba9330e5448749ee77623712ba71447b76cf218abdcf5e3f546ddbe9430aed377ab554f99b2ea12a86de59723a4400c19ad38ea1ea53dee772c87a8b8da3713257c65b3d9361f123d7d37d0631b753ad39a9cf19c65268046295cb21eb18173ff1498043d9f125b5a9ab74c1e98bfbc271416435d180cfdee9c13d21f85a8893994a9e8c07c75b539b3432a87839487da48be1519fa78604b60a52e8c3ce2b4aab040409a85f3c1d2a1b2d36d22d27b3ce2efbe6cb9a4551eecb6d5519a572ddb50b3460361da569574fca1b0a8282f0a46ce63904565eadd5a631bf5e8d3757267eb3ff1d7958cb557032ed196512dd0d1dbf1daf4a3063121a37209b4178098fb225e607e4c0e24551f56743a2977e7f75bbe5b7c1a1c22af0e0fe9ce7d28645b9d4057455033b4bfe3f3cb0ab34e9bac7107e9a6799e15ccfcd18e3649ffe240e21d0f4660a8ffdbd9e50c867bd42da23ce3431eb024ae23464a51906a55bdc193799a8db56e7856458d3be8eb6a382927b4479501b0146859af9f65ab10fbbd30cc1e497d4662b00a935cc58c1ff8c1b358dc5e58976e20b602fec31f8ac3a1036941efc17dbf5169a31f1e431bea75e69315636976e6c2291fe9569ca9c5c110286892ad49fdab336f67134f0709e7069df1e44ff39251ba1cac5f0ad45bdfb34b8d05eeca3727aeb51f5979c474934d95dab36e12c0eaea860ced3215e03aa330ffccfb3129eb8f2bca1f22c3bafa4be87ce25fbc4fe4317e4d81fae0a0e7822b6a655d337b67c2ab1e1411bdfa6f1b63adf2d613ac0e313db0ec0469740d18ca07e0e32b433e0acc60393ea755b71337f41df11bdcbaf6284db8da077d60b0812bc7bda7aad19471e175e811c2afea3f469061aab55614d9cdeacc63058d78c16721a7aa2dfa0f7d43ef61b4ce24a75f714c37f472fa68c36d83d8b18c5e759c9eeb709614a5f1292e63fde32560a2afce687017971c03886490923220728a243237ceb4119e1e37b8a902c3bdec147d4075909bd6117d52e51fac789ba3cfd71a779989a6d57c319040e6d52d09e4cd4605763a3aec462ae1f20e2484b4e3e82bde8540b483ce57a8ef587f08dff90feaa4220a2dd0c0e0c6213d0e147e404f5a4738f5213c85f21675b105276f4b1260c0502a8dde83c893e1999425d5af1d4b338f8b6abf3d02d40219d53b5ffef3cebaf7145ce6b0047087c9c792881583a6401c1560fc017a626730c1fed92f1c0d45d3e056b8d17e405eae4c7d6fe03174a6d4265a9949efd48139680f76956267e0cfcd772adb8da39ddf5405a031a695d1e537c04cdf6549e9680663c941b8ab5f101eb96ae042b998c9abb4b8da3d2d83d6e86ddca94f71400aca6b5836c1b933e7d32c6b4dbdad53ba0e70fea822c6bdb"}, {0x68, 0x84, 0xfffffffffffffffd, "a5f0cac25730f07aa6ce86af4afdbaa86206326ad1783359ba49f6549350df89a7b57f95b85556c12ed93a7ae45892e30290851a297ee1fb5514037f4152836e52b0c42339a3adb46db493241214a0cd4eabad82"}], 0x1228}, 0x52}, {{&(0x7f0000008040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, &(0x7f0000008240)=[{&(0x7f00000080c0)="0feb0b9ec210fec027a13a34b74c1ee60826605fc5bf9a27a5efc6d57d1a980f499716a794f581963ef92621c98ab98d38e345aca80349bd6facbe8eaad651840ad534b1c030b71e74bc6d235351b18d835b486edc1e2c6752d2e23e0e577145a6d706906caf04ddcd1b8a1ba9c4b9ef820dd9f2e9c4e72b6672a3da30057d4199df360ee15dd2be8919d0f188833184e297efea22efda4a4125df122bbf3bfeb9b87960923bdab8606def292f10b28d0319f1d2f1a519f2d0405db773e7b149f8a211a49670a31254c50b109471a449648d74333b42132a42547909db3eaa50226b9dd23e1a0c31", 0xe8}, {&(0x7f00000081c0)="8067706c9a7f0ddae89c5839857759520223ab30b5b975845fa0ac434acde19488520ca18fe7b92d2c40a01d0ccd89b50a16", 0x32}, {&(0x7f0000008200)="dbac9aefb1d988fa490c4ad627f40e4936569d185071ddbd1f7d12bf6327e5aa61ec1b", 0x23}], 0x3, &(0x7f0000008280)=[{0x1010, 0x113, 0x2ca2, "a5f68f9bb7667c380a9d7bd20ac7e85d0ac5ebdf430d7846ee5efbea63067b354495d73d1cc2d3056ee27fc2bd07cd7b1c5892588629ae853a5a286fd46818eb33e5530b8a99c2f7c631e2874cee3fb6436727bdd19ee0bb6079685357896faa7b4b28e9dfe4f9f989e47b9d5660db566059cf6faee9e4400a5d296a1e658be18fd65d247eec2a00acf7a35b2776d0683568f94d60ccc967735d802e7412799c8e4de4e893e11895ed28ca769f0551850d4156a230d90baa328bca60b04a72cadb21cf867ec5b23a276b559c27a911370f2796b4208b0edb397869aff547155047a31f8e1b1e5b21eba4759fbcccbc4f478d733a17ef3f5772a2da5e9d476d807f45c8a74ab8eb124dfee048e52ccb9447b6f44fc359a0b1ef56bb62da30274723c960138433d34ec409f70b34fa1c23c93a176d7c15e8f4cff99c0cfba04c792320a250c833e73c3010acac79a99cc9ac639c727f4607e64a17e36f0ba837ae9362948e0fa3801fc9b8eaadfa2f8fff162a4f06b6fb6e15a24e9e6b206339ce402541fbd5208dbf710fdb6a04fd9c99c3eda81cad97bd1b882f29283ebe66bb8b2442438f85acdc9233987fe82d8cd92ec9279c4900d041c5fdda577ab8f72377b25b48727037c21e193d1358535c16614bc4e1db43d1c2ce98109f00b41e4573523ac1f6740517b77723bad260e4e78f62b0515cb451db895b10101fc9a6a4ec9fc7f9b27142417a1ed2901813cbcc212c8813752c4d74655a9f6f309f5af7d5e7d3001d4d0eabc8ee86de3e87cb17f9fc515a5c917eaa75b81840418a9835733b17d48cf928a758f6de466ee7bb8adc7617bc3b7901441e8fe6ed6c6f2e42bf3bff54d8fb7f1183c6e9ed37f30541747f42d89b88e96f7ec5a24db37564d495ed686cc88a01dcf822115b72edde5627d37dc72483a6c719997eafd31ce8cf7f17f833b5708e834c6bb675177d74a922b3e114e270410c55fb87f00858d7072557b2068043fa5a26409b30b7550f587c47210a3257b1412047835b79e435ebecbf6f42cd05447dba72f43715d01d53ad6c9f9a8dc0db797438a698cc4cfd7234734b4332754a3e0353d2af16704fb4e64242f7d3bd1c74cd457f83da8adea6eef0b307d9276774dfbaf6c61942d7691f6b9bf38c2b294724319e7b2553d812bb198a6d79b7b2694eeb57d40dfddadfc2e7762fc4cb519b4933547c8ddb683bd0a51e6274268c4e42ffd8cc19380475f9b48bc3ad79ad6e673e29c41e5f3a280bd492c60b6fd6ad7975d0d748d0982d0eac5ae481b07ed0d5942e0cfbbf660277c92346fa0cc0d6d7c646f8596fe695331b89777abc56d99b2fdbc11e4e2c070cb741f1b7638f0bc440a8811f9858ed32745d6901ee589da8c4acbb94f1234f7dbd42f72bbf162250fcb28759157ef8d995db1dda8b20cdace49b32f57b8ca878f0b02f20399c6ead0db78fc559252b3b5c10944403b70f3cdeab4c680e93c767428bb4680a803a8d0b58d8d636a03ff1b3d18e4aaaea360df059f77a37874abb592d91689242e0bf47ec70dc0a3b67756b6ae722ca933bc55ffc769eb4a2c67f8ae128a0060dccba1cc36c8f59a88a6759b9938fc29af1a8e16e096b7330d95cccb4a810bb24755dee1d674be97634255d2eee588a194c6591b61161e1050c692680e6ddaa58d7c6b4db9cf3b74a43788e855ebffb51df66beb3b36887b2a6d0336f6173f9ced9a0851c12b42390a0864e8fdd79a0d30ed0678e5cf7836deddb9ae025f302cb51bfb91f1ea973484a22fb84677ad18730bccfac85a442e5fd0fd1c8908d690f6c38635ab2b06a25ae5b5a04939f6146f26934fdbfe79d604b82ee6390d83f5edd50d80f63a17767100e884cbe0b194ca1821166d2bc0c228dfe61f69f938e27a4a801286fc8978b34b75bf4bb52440bb71865dfb8bcd97c70dac0af9d5c6c09978f970f13e6ee688909c182b4e5bc7ada1139a09ef76d00967a1a6092baf6377aac9fa8884b42dd4f45f7c041d4390348a7fc6a43bb23fc314db0cba7a50af46837bd66c30f3bc0c8f3df5545b22f45a10a1a3069785cf21be997f1fa854b4a93de3f8acdeb6cfdab5a5cf61cdb21683518c9493a72ef4c9c7518149b4c504e4c83a13fd72c8fb17b99357f62d672d3a1e5eec61bde1075bf1346427f743ba85ff602c805f58ad718189949424de442aa9c13247801dd7231659d4bbbf62f6d0b3312b61c58408b93c0e058647f31dc06a2fc93a355c5c7e4cd517f777e223c9d9d3499bfe73b04fc22da7ed02bb45bd38944341eea54400324688a14f5efb3b8c4d0f5a511e205b8cdea55f4a1147c46753ae478217ab5cfcb9575eabf66f607e56a1177d597adf2494ca9ab3ca42c446b069723bfd38d98a9728928d3161ac290936c464df78a719cb797ed723846b9c834340477b2023f52d507f54bbffbffbece87c0c320e65a74a32a80bc203df2754d48f6411c4559770f0406d8ff96c52435319424e82371f9a3066d25669cb4de3ab2a0b8329c1aa21a1c5d0d2e4a9955c08bb9d22954ee4e99a4017ac51a0f1daab6308ca730a84b88fbbd3c1cbde32fb826d99c917df87ff57ac55cc93e3d73c16eada0c52d662da0064c674a829cc0c11b3d169d0feae052b8fa490552f96c49ba3d01cd3814cdea6b0c393a209436e3f6e4880f039c5d28fb2a763be11dedc28fdd43722d87a6307b2d33fff2cc1e849e86ef898ac458185381040b0779184c3ccd83f824ab543fec3c3a6349d54693765fba4b0745f39e2ddb6ddfce3328704c291fca6865314c55f4597cd0d551d7471bf3df3b0b00d589edb1c59a0c395e6c7e2dc3b66175d535e577f39bea921dd594391e6c8b513850d840dc483ec18e79edb8201a7021c44bac771acfd47144fdc2dc78fa90f9f75fcf8c53d054b4862a0316c5443d853f932a4dc459f94fa877a29c89538b0442a5d6dea452d6ac78f398c8e82df2119490c715aa15c2dfb2989b3d5241c79cad03dcbf3beb678b86ddfa4d8b5c233022d12d36f26449fb344eb0c8d9e551ad172db8f07ce4bda85b5bf8c1fa40693aa9e4f15ae347142fa3dee71dce05ed68ff95fa5f0f0694c9b228f34bb76d5715d88fd1a340a8a5adb10c240887f44786d21017f19637d2197ab260b4fb4e2cad7eb323cb209892031d165e0c248235508740f608d5c24510364f6995a9af06a176bf4953a8cc7f764ad54116dbb600ad1e807289a43806f129409567c7b616fdda6124ef5a9ed9d12ed4c6e44392b628b9b1bee5bed49708a6497574deb84d6501edaa8e87538e233b46ed23fc1fb8e0afc0504a8bb7ce46989fb8bee2e3cb9a08487ed6756a760cde0d1780ec5a27961701b62eb15ff3fc915250ced96ce3e2b90a110b09d440281640af23a179abbcd4244bf2510282f3b265db58f98131daa8d56ad5ae5f1476ce35f7893ff3bf5eb56e40bb9921bad69e507fad4b35338e6e4bfd45e1acc656e4ef3f905ba14eaaced2d9d7f63915ee68ef0ef1419cc232f1df4951112a6eb6105f3b70b798ac55a8a9295eac3d855493fa59d03aac2965ccb573f6faa2e0caaebc3ff2206d071ef4f8c4545b21e5cbb31858393b870a409a5bbad5d37a7e9a6789fbe06f0caab42bb6ce03bd8ec6491e58f4914ca9c4037eae0b3ab593256e50c13c55afe9b922efee9f7028938cec8fba74b0da5e958d16943843e5764aec1c2cd9d62a6d3403eae1895a1fb32c0485cbc6389a5c7cece2c479d0fd85d038f9542fc9c86966db42889664dc5e88c75219567467dfffeb4ffe72104b4a512b6b540165ab8585747f7fb40e27840c8d6966fde0b7320454ef7d83ebd05b006d6e3a8dd1ee12d1e0924b0b383049374c33de3ccaed7ed1707bfb09cb3b3f354a3d18b8e7d79249d960a9cfc636ced2ca11082136b121d255399a040da5c16c29337b1828d6281428fac61483fc8f6b93f3a108f7607883dfaec69b04fd00cf97d8d720e02d820ddd50b14c500da693f84dc83df72f9cb929684e81ee9c5091e35f7c64191382f94b4374b7e1fdfba45cbeba57e604b68a30e23842483ca80ad6c1d1d04f67da0bb40e881edc7bec68732cb194a08d416b0f640ed1e4f8f8855bd94cb009ca5185359da0a937a4948e76826fc80d8216cf67c8ec161eb76a81c40e3f3d53941fc0aeaba049fec81a91e9ca2412e448761f8ebcfd5529789d90ea9b81e7ea3adfc91c55a5ab344bc45792c0bf08673ed1f48aeba356140c71724d8de302de44983aa694c7ed5acebd33e7af1870b268096cf2aeca7f7d254b44a0ff09926129718087c37a559d2f60970b79b228635e09b78374f80bf62fc2e5508232326398ae2251b2889d923e13ef3887e6c9627cefb5febc9a035e7a7c5ca4588839f58fdcf162d292ad2e2b22a525deb94c9fc63ce8c500b66ab283dec65218fead77530cd57f28a68c9e6a2274beee190b0bd6721aa50fc85ef256f987d0fc289104ac37f596c632128e72bf41a3b3ceddfdb28e5403e4a9da5ecaca03de38bfc478f73b39be56685d3fb24456117e82f017b12aadd643e4e32e741206ad16a3fb3d517d790a6f465774dda5a216b661ba8246b6cbabe1ce75a9b91bfd51e7ef88d1d1a4ad3713810833729438c467e45869bd44838aa407d839a51fe89e3bb17e1c37ee7dec7262d8a60231d8ae07fdea4a932ec56f04476626f830cd0645078416752fea49ce7f303c3f670f182fbefd1fe2691f9d4dbb54d9d2745d2c503fcea0f5c6c915a88c603a2d4d466eac79beea1662312bfcd79f53f0984bd8a0f6e222c7db64e38c153a6641ef71b9f421f50defd7eb8446c4ab8a9f39b94c960ffa398ee34f6b575c186c98eaf2d5983a1fc1a065615ee54820aedf04a3a12018e8f07facda98789b8ad85a6e26c1998fa5c82e816c1cf698b099e7bc1a18e24ed258f2bddebb5e62c05f1bdc86335fab43897ebc8ddd18402a506d63007c63666a84d4ccec694b8a051a3d47927fc0b0fc0be7a00b7624299fc09df4584604a537ec887df32f2bed05a0533608b3c34e95c792567c3ae9c88c5144931c7330efe724295d4b1a14b07bb1ea50c38dc54e6fc2e86abad5ed25933cadb1b59cfb319d42b71d0fb4643b152297055c0d45c1f237a962b978df270a868572ee46773fdae85c96e9f5a55274cfb388a3c48bc959402c7e5ed8db980b6a292640f3ec26858dbc11299e0ce456ea9d8e7240335f71762843e20c055bbb93e8f48e4a5dd12faf9d92c833f092764cd08429815a6cb7ae2d6771da4ee24d0eb620c13fbf4606f9d4040194c283371bbc5b7b0932ed5aa9ca0d63ee84bd541759a3ac835bf1afefc0745353102bcf9d0fae07b34a40631d1329cfd01226e9d0e44126cb3e8428f347215e62de81695104f405d7c9f5bce917365436130e1c7ab359e41f56be8ce6440b60ec80413d69f7e6a9d2d4ea722edbf4082ce98a5935cde8a1aa7c4e1f406695a1ce57f65806d1e6761c80549b5a863ba8b4bb3d74bb4180a498bec3dd2925264e2bdbb8cd0cb85d21f64361896e162106ee3d0c786dff818ee9cc10dfcf7016c82d570bd44ad1383f6fb2e94567f7dbaf765960be285ffbbac3800100663cf2588a996695e9e12f623bc41cbc4611cfbdc40a90e667e41b5cca783c8f7e8a914afeef89498efd27dab560b554f6d0c08848586e0dd65476a811192c26e88d1a78ba4b9c29ec024c7845bd7bb2505522d2389b30d9aea1b25027cb3331e3c9edc1476b9dfe433f0b03bf5ae44d5775b33d"}, {0xb0, 0x10f, 0x3, "4dafa6f5f1b398d46e38563a8d44ca9a470aa3d2e9792daa91aacdf7620c383f6f47fac75e54b7eea4977d6067615a795907e0720bc5f7f7b6f6fa2a2c7bc2b84124d8796ad3a2c0dec8f24a3467e7548a7080a26038f3670a119fd4d151e52b86b3cc623c1a9fb8be63bdc20f54373bd2c83a2becb652eb4881fc86d53ba14f2bfd84079014b16f82552ebb08ff847238a9c8f66a38b1a3ec1a5bcf"}, {0xd8, 0x0, 0x0, "63167f5f9aef87e0e893d27cbcfde86a2596fbf373b53d1ac6dce5421008f95f942caf58ab64c7b7db718aa34f2c6f267d15063012e09096d617ed2b50e31d55c2cb127caa33cb34aa9383e15e4a3bc8102ab9acb564004ac30561dd225b7747ffd832aad7ac8a283fd5804617bc0ae37570edebc8db03bde835798a087ff626f9a4fd48a059d4abad4d9c5d8370ca98707ba0bf89d8a42ba6e6826ca0283fd5ea476149baeaff02f6707ea1585a2cb07de2be3a9122d7698b26733bcf7ce18ee17930d101"}, {0x38, 0x115, 0xfffffffffffffff8, "a5f8ee8b4b5f6d8ba3567c395edcf943acabf11a6773a3568f3ca9b2382cbc4b51262bc4d6"}, {0x58, 0x117, 0x3, "f07eafa4787dc5b93b050e1b39e3ea02708fed5f1b7e70adf873a2edd2c516c2316a46c4abf5adcdb0214c3aecb76fb9f4ead8b7a71f8a37dc71f1df4185fac0e4aaef1241"}], 0x1228}}], 0x7, 0x8000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000a60000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000443000/0x3000)=nil) r4 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r4, 0x0) 00:36:41 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x61ff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x202000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000000)=""/79) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0) [ 282.243714] SELinux: security_context_str_to_sid(useru,) failed for (dev ramfs, type ramfs) errno=-22 00:36:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 282.290984] binder: 11908:11912 Release 1 refcount change on invalid ref 0 ret -22 [ 282.311262] binder: 11908:11912 unknown command 1 [ 282.323530] binder: 11908:11912 ioctl c0306201 20000580 returned -22 00:36:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1c35}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) close(r0) [ 282.391475] binder: 11929:11930 Release 1 refcount change on invalid ref 0 ret -22 [ 282.424112] binder: 11929:11930 unknown command 1 00:36:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 282.445986] binder: 11929:11930 ioctl c0306201 20000580 returned -22 00:36:41 executing program 5: r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) vmsplice(r0, &(0x7f0000000bc0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000580)) fstat(r2, &(0x7f0000000b40)) prctl$PR_SET_THP_DISABLE(0x29, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x608, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x1016}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f1f0e95}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x11) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000380)={0x1, 0x100000000}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) getrlimit(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x4000080) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x3}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12102, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr="81e875302d1377dddd49216dd53fb17e", 0x29c}, 0x1c) recvfrom(r1, &(0x7f0000000640)=""/69, 0x45, 0x0, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000009c0), &(0x7f0000000a00)=0x8) 00:36:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 282.499840] binder: 11938:11939 unknown command 1 [ 282.512172] binder: 11938:11939 ioctl c0306201 20000580 returned -22 [ 282.570956] binder: 11946:11949 unknown command 1 [ 282.578551] binder: 11946:11949 ioctl c0306201 20000580 returned -22 00:36:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, &(0x7f0000000100)=0xc) r2 = getegid() fchown(r0, r1, r2) 00:36:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'gre0\x00', @ifru_data=&(0x7f0000000000)="b0fe923faddfca333edb10941f4d9e7adb545074dbed05a182b88cdaea1ffd1b"}}) 00:36:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:42 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x80) lremovexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974792e2d00c32e4b98ed9400b67b52f8885a98eb645724dad3c11a3090267e98b3ea8f343c6b4aa89b4cc7615a373653bb12"]) getdents64(r0, &(0x7f0000000200)=""/16, 0x10) lsetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000280)=@known='com.apple.system.Security\x00', &(0x7f00000002c0)='$\x00', 0x2, 0x2) r1 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x240) inotify_rm_watch(r0, r1) chdir(&(0x7f0000000000)='./file0\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xa0, r2, 0x402, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="91ca57e2826f44f3b22550de1294cd938f3dd61a19729c3b9d7390f3f1e32d84e53be6781523719c6bb76491c8dbb788b9b37937a0143551a02353e3eea5c0e3fb"]) 00:36:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:42 executing program 3: lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPIN\x00', &(0x7f0000000240)='.*(ppp0\x00', 0x8, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000080)=""/165, &(0x7f0000000140)=0xa5) write$P9_RWRITE(r1, &(0x7f0000000280)={0xb, 0x77, 0x2, 0x9}, 0xb) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x202, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 00:36:42 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x7f, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) setxattr$security_smack_entry(&(0x7f0000000040)='./file1\x00', &(0x7f00000002c0)='security.SMACK64IPOUT\x00', &(0x7f0000000340)='/dev/loop0\x00', 0xb, 0x2) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40800, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '/dev/keychord\x00'}, {0x20, 'rootmode'}, {0x20, 'rootmode'}, {0x20, '['}], 0xa, "87c441dd940a9a5ababda22041fd2518321a695d026da0fc0bea286714f3cea9aede2880b0f098486855fcdbae940cb69e8baf2ad92ca1028ea1d1f9ab4035de16f355b847c4abad5f21bcba60e35646718ee86f7a0bba92573c92409a1032b4a012597ab807e5c993e0723ef6e122d965ae4e9942e08887a20c07e6f7947fe76e3b931b47a47d0ad7298ccb57f19a7e977d7ebfbd215fccdf09ded937757289502938c72b1bada50ce1dad5297e96499d822fd74e3bbf55f4113c789ce6de1c1af2b213adc920692f3ac4cc42f6741347e9e4bb70a0a7e9b6e3407f82010063df1bfe87f24c92afdf19e9abd066bcb8f8b1bd7c31439e52b9d89e6b498926b396d3dabb42505240c5124a8e9cf2daecdc5571ce1656247e8914e703938d4e6eddb7f3046396463a1023f0cf1ff0435d3268ff54bc6cb40aa00221fd80bd37874e750407bb43ba63b58ec5550e1ff58c069faf697d3f20c5adfe52454f3f37c6a34e3104230cefc5a906254fdecd0459377ce46cadfc1a995a5d3855c06526168b8aff2cabd7ae1b17dfe322ff6a30ba85e1cb870d2bd201f0131005e07b6336e94ee2108798d8e886938316794babc32a747d1cb6d1dc91a08b8a3164949f76bb9e73174220302edbf6d2f4f082b853fbfebaffa5adac86c8affac8d1bfd7763f0d1fab82511c5aa2b547f4d7dcc1041d0e932fa5631c093f0ca71c7ab7a907b17c43e690dc5ca99f846668930373325655a1180929d6d70926ff65afdfc5258e9d21c65218a47cc2387bdc5110ab6cde9b622858a628ea31b0d56b05816254da92732a62c2a547e8fdca481e5700cf20d45e76f24c5214a38d77917cab5d7c50477c4474179ada834f1e944374576ae10dab3371c308faafd16d3a43ac76b33860fc945c464582ef5738e7eacc1cc5a13bb5d8584dd93cbde8d98f62344846adda9a134bb8d93222adcd70e836c1d5c5d2be5c1c422b302419d31e26ac004cd683ef35239b9b6f7113ca8113876e04250a38b6f7caa8d23be2dcca886f69278f8f1902a423b884af557a52ba6b3e6ef4beccdccce21efb63818e7e6a4966122e55d5bf4a530829ea19e1d09a11014689e15491214f3151badbfd024f721f8d2408694fe22a930512cdf2415c24f30d0f73599266fa015a5f02b8fdde52738a87dd225574eb5608031b5ca6d2c13a5b05970ea46e00145f20866914d2440b96a3fa8fa0c7448d1726ee1c138356973ad2c116929b989623ef6a53b22191e33522d5110fcab8fd181da0a18d2a870aa91b37b5b9011150e5851154b9a421546a3ba643701b13b08fcb823ee7ae58c04ee65d4317526b7e863075f31cb020fd6523f6d6e1680b07d4374968b1eb2a0538c8baf09d323d34f6cdaa688ae6399dfa8f2536e48da6e6bfb21e04dc34b929ef085a17262d7625a897bf5a5bcd1da227bdd7cf5475a5caa48fe79708ca160d9087ab718b9027e4a9b5754a45653988bde5fcf896b2527e0c478cd0ed8507c61a8bde070efc8fb05cb40d95c401339b321b2e1edbe38254a410a7f78fdaa05690981a0cc8b991f49514ab37d75d7bc8ecd8497d9f80caa9b4e386effd17457662eb441399ca9d1c963d2554ccf3497c26d8f38769ab4015595c6a47a4c2ccfec2d085fd69b6f2a22fc9f30ca60f8ddbe43b8e62177ba65939e34f597311a4f1753f991c35bd6e27531d4214ba920cd5119662a2b72fed4501d64f093691078bde72cf2a47a47105b7a6a584ac5e62dd3e98c54f4de377c0234d0591525703fe3f3544fd8f3167e2a4a78bad67107dffd7c9a26e62df07a94856653043918ff367fa7b33eb97a1d5efbd6205bdb4ca62e31476e095272b9656bc7ff65ecdd33eaec71db2f0615a24b9ef2456585cee2f55aaa5e1ab32b51360b12f5f4f2f3fa28ff1e70bebbe017eb8259e2561d940b284e66ed9571bc2badeaff57bd2e85fc251ce2cdb9fefb21b638fe1893e6f36d29b6a5594f6c35ea32f633066b0f0e6578b993186ee63ad9a745c146826f63556859ff3da71550cfaa64b2599de684ae9e17b4a33d018900679c04d632cb71d3b946fcf3ae37a4a854d423a5697112a47a7d2adf53d50c610356c29012bc8743dadb383dff500a28a23574832ae33690bf9754d7e515e345d4535a2be3674ac6e39e578b519a2e1f6ad26e6725cbfd1cce5350dbac1ce5d8dd9be4982e0638ff4175ed05c9cf69e750c382614f0e8ba032b9e041313d35b216400240add976acdced3fe023f96471ad6d8f3008b1186dd38afc1cc0e22585dab1f0b8a2d6dd2676067c13c819088a60d9fbca7f077e6d13a2f58fa6a7e006b6f54fa3be10b711ca74ec7c38df16dbf63f05fce0e4635515e7a7263918574bb583cf9f468e48b1972bab80d6970b752aa1b53a443c64cc6ef9fabbc940349a20f5182fcf7593137c12af9e9b49bc144e9ffaf4b7a712e7f27d98368058197e1c37397064ae18d501f9b5a16a17d661f6ca0b3cec3f7c6360e32b1ed95e7a2d2531763ee423c0e4d4788d865faf8b76d41948e15d0db6521add301ae7388ca3513ef3ba0056894e26348d7c5eaae145f6429c77f13e7ee6d67e68818010dfc551cb1bdd27353c6f89bf0ed51f78a947f6f69927762e096a90312d08d33a679ebc262865a1009115ea7db1e24ab15cca0b410504e1cbd603961db9aacd32265786370a47a5cbbdac9e5b010ed2196155628ef4b5808b54a1fe3c500b824e81627ae8747b82bfd758afc035b1e964698d46c879c4924a8871b0b59c5a3cb6aee6f784941b57d8379d1ac5d7903d856bd285104cd54e5571b8305ee0598d866b725d4ca88edbbb144cae97c6d792c6425c645f4d948f7313819e9512148794f18da7b8108dac4f94d4cd5020d2342a2e2481d78b041578c25efc991bca97d8bfe302d8ff8bacded16fa917c0ee528bd0e17784e46d2b22faf3cb5103e1416b0bf49cb8e2af24887259c21eac57d18a4971fad64e46c05dc5fbf6ee96f3faf2be8d9b41228c9eb0e4ed08f7bc8ea30159d2612a8d5e21ae2d5f693b595dff209a3a55efd9330b2abb17797313836a3729871b08a85956316be0567e9c423c17db879574df928f0728318f2e1c7404f6c02ed00a187d2cab1daad3abdcf6a41eea443f47812c9b7f60fe782cc9646345411fc0f35f1322d6455b3010457e382d8c22d7c4b40ae605673c3d1ccb1928a46251a1634999633f102a2455ce0feffa11f7d033ee8422c834baad3a25e8ab930a1c3f6cf264ba011bf3dec81bea1268b45f299a075a89b89c4e61ac27b70443fd0e830ddda722cfc6c3ed415e51367bf9ed18a0f5490b43f7fcfd70f26df927cd02ce97f5ceeea0fbe33cfd2d75b65ba76ea36115326a8142aa648464e69376798296e4328f8a45130fca490293b72fa4ab1154d48db4bafc4383f6b7a7f8e066808ce267da618a119185e204a39439fc8b4236e5cf8e9290f59f6553bbbae55fd27e3eac45b09871c862bc36ffae7c858c44f86fc98dbdb10828859e17b800d8e585444c72e87173071c21d796a6899cc746db4af4ded072e3a6411f27979982feb1cc8a44864aa765688d285d67ba06ed4a25decc493a87cfea6a17a764597768b05a0880ceab49f560498452af5a8a01a0d3884a3cf1ae36b9a658596f8e3b497f666f45affb70cc9d41f5b53d7fc65a4b3b8ca962470c755ba428e12788c86e4c664574cc2ed586921f8589f2faa574cadf25a21e7385b9435dcf51afe48029463e753abb3cd04f33704f0cbf53698c6b866fef6e5bb4bc279b27652f98012c2ff5c20fa0afbeb79497d8091304d4f3496f918c52e3d3d3a03249d62dddabf751807da62d548e87d436594ebe6962fb23a0cb3b06a5857ab02f3ada00f84ee6b6c2469177bb1d2a4371d38d38424b2ed55e77579d9388fc7a3fb531cdc000b7dfff24a1263ab0d95242835b4f63212863816f194bbe7c368384f12d4437d8d6e752a30b7766e56b7bc750bbb65e9db6a04176a3f02f99b21239bde7a7f06a4af4ffe6ab10824cde470f249076ebb1131e3371555b1737ade9686b2e59afd177bd84c4ffe8726130cb29a418db397098a22aea684cf0d972b0b7f8312d0d16e4e1bd33efa32a6754815f37e1ba6443a9c34d890ee3477b41eb5b275340bc51ec8a392d92af251fa20d75fc6dd1298529cd254edd53a8acbc2896f5d120d007938b4f2e703d5ed700c0ddb7f031c54c5f6866c2d8277ffee31c491cfcc537fbf9df5620458019b55fb3c2c2f209a5a3604b9b5ffb5c63fea110fb29dc7daed2c8113d28e8d1af251ede7ed3497bca5b42eeb5beb333b730503eb5fe4e309f359f571fd72fa1bd76eee2ba84afa9c9b41ddf572c30b9287f1de109ef08cc9f34130afcb45f157326b5e3f9d0547134c7b1163fe4b57b9365f31f5636bc3a09ea62ef9877f790027c903b01b5c2d8609d1b9d8c511e3a60325b9ae2c11862529230f2aabbb91386e649cc451aa79ba71eb7b869f770e1516110fad9b8a77ff5adb3102283390a64041883d11064d31706ad2816e29fd9bbaa7b46266713e6a997c180129a0afc293f3ecbbe20f8cbd644c272b0f13ce3b3181a6e902f67e4b1fe828ded917e14f7bf22635b45dc403eb467804f458ea144c5dceaeb27e28a1ac1d3560dab00ab0b1b9338f8f43ce142922c37b2c98bccb582d5511854f12727c1acd35c5bec17b24f04869804bcb7a38a5940124addc53738370e2d9485a7e8b07ad015f893ebd652b29fc497275b07be1971824441f2ae6fa0e5992b9e2471fca7a04ad11af03c6cc835a2b1761f5b224df44ea1c3a61c3900252c2ef9faa137747e4087d8852fcbbe22fb9e8766f0194282694eabd8bd4908737a3cb2a7f5e213a7af1518032e2fa8201f7a3f932118bbe68187ee503201ed70ff0f7a14a48eb431ed16cb024aec6594fa3f424d674239fc7a8ad6fbc5abfff6c3ef4e05e2bb368fb69094674b079979a681e9cc285bb1c016fc84b590499a8d9abe9688a22b3ea0bde1f4b3c0e6c352d759091c0f449ef8a4eafeb957c7443a3eca151ce8e62d7b5622f6da93c653a3091886c663772a13a634835c06a56b5d9384d9e4a3ad69bf6067cae78a86fbf9d11fae2b4b58fc1630114507ea7773adb9a104c62ddfdf469a6b25f127bd4e2fb8e2a7687fc4db6d6efe14d2208cab8e33e0f21554fa895ddb7e53812d0b1bcaa9dbc8c3becf06dbaa714100f43dbcb802046b16ab13143f36c8541f0f633cf243deadf77fb708539c5490ab69214f0e56dbb4397d93f8546e8927e0dcd23cef36b1e7daa1c02c40830b413b44a6874866129194dfa834d4a8239e6de20f6835116b7ae5149a73a0773771f5c86c0273224e01ef79db7be4534ff6e8c9a8cd7b9e0f81ad8f4f4355834dcba06e3c2cf9b9fb3fb2a3c0d4b182afd727e88682f26b2795fb61bb68de6c9316a9f2be24f3c2610d38b4f5f517a514498b0b3918c6a36fd508991b2db8f4ff091fbd6771d721c399c8fd1eaf09b130cc50137db06ca1f68257685a0782102627db73fd1e6684ba19cf2a2ca837c95b05d72135133382e09895afae3aaba8a9438ab95419395f2f73b17439af2cc43e6d1753a6dd715f395f62d4b484968388baf28eb048d62de2031fe417674334b754cd183156f1bfdceb0f5bcb9846f6222f3419dcf7691e30bc8912264e6cc86b807106f2d972e6fd7991be222a9e13540c4bb6ea82e261d41370d7383212b58f3aa015709c21ed51d132f835c1fd6c31a028faa729cc8"}, 0x102e) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0xffff}, 0x28, 0x2) r2 = fcntl$getown(r0, 0x9) sched_setscheduler(r2, 0x3, &(0x7f0000000100)=0x10000000000000) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L+', 0x5}, 0x28, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@empty, @in6=@remote}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xfffffffffffffe86) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 283.208778] binder: 11957:11959 unknown command 1 [ 283.215530] binder: 11957:11959 ioctl c0306201 20000580 returned -22 00:36:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:42 executing program 0: r0 = dup(0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/118, &(0x7f0000000140)=0x76) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x20, 0x8, 0x7bcd, 0x100, 0x65cd, 0x80, 0x8, 0x81, 0x100000000}}, 0x43) [ 283.267153] binder: 11971:11978 unknown command 1 [ 283.273249] binder: 11971:11978 ioctl c0306201 20000580 returned -22 00:36:42 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05ec4594ea63044000000000"], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07630440"], 0x0, 0x0, 0x0}) 00:36:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 283.311889] binder: 11987:11990 unknown command 1 [ 283.318925] binder: 11987:11990 ioctl c0306201 20000580 returned -22 [ 283.358630] binder: 11997:11999 unknown command 1 [ 283.363271] binder: 12000:12001 unknown command -1807356923 [ 283.363386] binder: 12000:12001 ioctl c0306201 20012000 returned -22 [ 283.363441] binder: 12000:12001 ioctl 6611 0 returned -22 [ 283.363495] binder: 12000:12001 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 283.367105] binder: 12000:12002 unknown command -1807356923 [ 283.367116] binder: 12000:12002 ioctl c0306201 20012000 returned -22 [ 283.369531] binder: 12000:12001 ioctl 6611 0 returned -22 [ 283.373590] binder: 12000:12002 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 283.439995] binder: 11997:11999 ioctl c0306201 20000580 returned -22 00:36:43 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@loopback, r1}, 0x14) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r2 = socket(0x11, 0x2, 0x0) ftruncate(r0, 0x10000) connect$packet(r2, &(0x7f0000000300)={0x11, 0xf7, r1, 0x1, 0xffffffff}, 0x14) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) setsockopt(r0, 0x107, 0x12, &(0x7f0000000500)="01196f4a009b0c000000000000323f0c0810a3803174a120afd7a95e8d132d796541949d6bda8593481838f787a6e5ecd1401e73516647a29faa7ef500000000000000ffee08cfe13f3a85229fe41e2885c35054298b1b68d1abea143fc5ae85a80c6fe3e791775ecd121c46ae1a49956763293cf8d6f1b7332edf57e78833fffe4e00aada58473b64e71becd2959649", 0xc64288abf27fd7fc) close(r2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @local}, 0x8) 00:36:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/l2cap\x00') setsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000380)="baf73c1a28491fe6ac826fcfa7e62b883877e7d1aa044311b06a5383547ac7f951a881a2224e5baeb318c965c22817ff5fda217679c02ebc70241f5a172dc77f2c22214a422dac9c84d636e7b835b9cba6dfaac48d1c906bd39e20c58c378f19855c883223a787ac741a41992f829c1a452e7f9434ab13a3b7a9ccd11b9998f994134f87fe1228f9fe264f4e1e7438765c546872b30214b41b3aed519cc18360b4675d4fc4070e6396880efb54a1065efa58bf350b7f19a81a9d216eb19243241d1808bafaf14e95a224763d12b85e2400061109661a21adb01fc2c7d70e268ef3bb12730cd667f319169f503141801d", 0xf0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x105dc0, 0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000100)=""/50, &(0x7f0000000140)=0x32) pselect6(0x40, &(0x7f00000001c0)={0x33ee80000, 0x1, 0x5, 0xfff, 0x800, 0x0, 0x3, 0x3b}, &(0x7f0000000200)={0x8f, 0x1984, 0x82, 0x10000, 0x800, 0x1000, 0x4, 0x7fffffff}, &(0x7f0000000240)={0x9, 0x1, 0x1, 0x7, 0x6, 0x7fffffff, 0x9, 0x1129}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={0x2}, 0x8}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x00\x00\x00\x01\x00', 0x1}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) dup2(r0, r3) 00:36:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 284.168939] binder: 12034:12035 unknown command 1 [ 284.174286] binder: 12034:12035 ioctl c0306201 20000580 returned -22 [ 284.194300] binder: 12037:12038 unknown command 1 [ 284.207491] binder: 12037:12038 ioctl c0306201 20000580 returned -22 00:36:43 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) 00:36:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r1, 0x9, 0x4) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_pts(0xffffffffffffff9c, 0x800) r3 = syz_open_pts(r2, 0x20001) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) r5 = dup2(r0, r4) clock_settime(0x0, &(0x7f0000000140)) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x24, 0x6d, 0x5}, 0x7) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) [ 284.284395] binder: 12043:12054 unknown command 1 [ 284.292264] binder: 12043:12054 ioctl c0306201 20000580 returned -22 00:36:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000740)=[0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff]) pwrite64(r1, &(0x7f0000000840)="c8de4755267a0424e6e0ec5c7ce51ce29b202e608de871a76af014ea11f200f84274f2dc04281b92ca0e749e997c1bb8090b6aee267ca697ab876fa90508086b99269c81473dfd3659091b8f6254380f6d18c668ceb20c0810b0d58124b44ccce46ab4f9022020a17ccf72f1a5b18b48f3216e37c86040e14681ac77fb5e7af6edf7c93164fbc889164acc97c224899ddc71d862a50eb02bdfb6ce0a874694ca9eab025f63a5bbf4acaffdc3f866e2c7feb2e62080c35193080d9253f6073321a227cdaf0de06581ba305824476cc117c725d6f62e72f2cdc6547fe67cf09cb4e047852fb4c84ed8615ebc1cbbaf06f2688ebc1e7959704240", 0xf9, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x4}, [{0x2, 0x7, r2}, {0x2, 0x0, r3}, {0x2, 0x1, r4}, {0x2, 0x2, r5}, {0x2, 0x4, r6}], {0x4, 0x7}, [{0x8, 0x1, r7}, {0x8, 0x4, r8}], {0x10, 0x4}, {0x20, 0x2}}, 0x5c, 0x3) fcntl$getflags(r0, 0x408) r9 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r9, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 00:36:46 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x1, 0x1000, "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"}) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) sendfile(r0, r0, &(0x7f0000001100), 0x10001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001140)=0x1, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001280)=0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0xe10, 0x5, 0x7fffffff, 0x86b, 0x0, 0x100000000, 0x4000, 0x2, 0x2fc, 0x2, 0x2, 0x6, 0x0, 0x4, 0x5, 0x40, 0x7, 0x6, 0x80, 0x13, 0xf28, 0x0, 0x2, 0x0, 0xffff, 0x8, 0x7ff, 0xfffffffffffffffc, 0xf1b, 0x6a2f, 0x5, 0x38, 0x9, 0x1, 0x1e, 0x2, 0x0, 0x80000001, 0x2, @perf_config_ext={0x20, 0x10000}, 0x8080, 0x100000000, 0x5, 0x7, 0xb51, 0xfffffffffffeffff, 0x1}, r1, 0xffffffffffffffff, r0, 0xa) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000015c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000001580)={&(0x7f0000001340)={0x208, r2, 0x122, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}, 0xfffffffffffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @local, 0x5}}}}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x244}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x615}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46b}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb70}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) vmsplice(r0, &(0x7f0000001680)=[{&(0x7f0000001600)="ef8196054412d9aec84ab2d498b292fb505fe61f77bf642d3ebfed3535d1e00db0eeb57c432f4db83a49f7a214cda122f08b52e72c", 0x35}, {&(0x7f0000001640)="95edca6652f3b091365a1dbf76251cb29a62a00cc4d907cfcec59d", 0x1b}], 0x2, 0x5) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000016c0)={0x8001, {{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1ff}}, 0x0, 0x8, [{{0xa, 0x4e23, 0x7, @mcast1, 0x9}}, {{0xa, 0x4e20, 0x3ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x200}}, {{0xa, 0x7ff, 0x3f, @mcast2, 0x33}}, {{0xa, 0x4e24, 0x100000001, @mcast1, 0x1}}, {{0xa, 0x4e20, 0x1f, @mcast1, 0x8}}, {{0xa, 0x4e24, 0x8001, @mcast1, 0x1}}, {{0xa, 0x4e23, 0xffffffffffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, {{0xa, 0x4e21, 0x7ff, @mcast2, 0x800}}]}, 0x490) sendto$inet(r0, &(0x7f0000001b80)="aa4aa89a39d087add39423be45ab038de15b25b58c4155aed35306aa7fda94ce5422cc2a996b3d193bc6f44658b705336bdef61c85844c8e7d25109573fe8168f55f5919fe", 0x45, 0x800, &(0x7f0000001c00)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$cgroup_subtree(r0, &(0x7f0000001c40)={[{0x0, 'rdma'}]}, 0x6) ioctl$LOOP_CLR_FD(r0, 0x4c01) timer_create(0x7, &(0x7f0000002cc0)={0x0, 0x816, 0x2, @thr={&(0x7f0000001c80)="acbc5dae19", &(0x7f0000001cc0)="871744bb6e95ec7160dd86b112ea6c6662e99d783f719c4fb32d8bcfdadd48955cc45b078401fec1c50f56b4a99696521d13724f34fbe86429ea5aab590885087673555e08091f4b119e0c89f31036aaffaa9dc45f3ac95752e22569a9879e0677e0aca62bce71a7126d62a3be89ad2180507bf78dcad4160f409dace0f30f78606ac865f01df885279f5d12d6e52e3a4143e9fe987bd829fc2a1839c4b621215a3a4bd23c87d774c82562152172f4474685e14546675e26a0c59b9af9ce1f4b9f62526c2fd3cdb114532f598caa0eb001e56660a261df07532ea8f2ba9babe3e405c06759aff8592bce5cba291127e2b18ec9d39e0334536066b01de525829c20179f560e2b15e56d176419a9c77f9ad9c443c1a081c10d8f33feed85edbf7dd66eff12d4d53dab9d7ff79d57a2b5781415b476c1f1351e879ac7c8ad90bf03d7e8c9cdc5624bb17f29deb2eec1858a2ebc5c8d8fde957036f3c30f3f845d6c33bee3d3f8aa1b67a2931cb7b7233ee0d6ac75964d72651959becc0128acf72c2570f3f55ee5628ddcef04156a2a362431ed6c2cea0e0d74871baf3486747facc3bad642ff52c3b9fd021cb6d2a9b1af99ba425b808facce1e6074de5acbbc9ce27f5669f31afb81e5e5709f28da2945012ba3a81a0226d35b942dc327e1cddada9b50a379de28d44eace5ad26257aa1ff698a0cf5d6d508ef9fcddd221e7081fcb0b99c44fa3da6fb4ace48e313046ec97094d7c01e33a33bbfd44162bc604b2903ccce79a0569494da9d835ac0e4a1d1131ffadda1837707b5b10867b007456152959e8f7c610e28d856b81767849cf8b481952b9268f86ddcd8f83a33cd0ca27377cb237b4ff54dbca4d6faacebc055d036234594f9cf942d62f69400b99aa532b4fa974b342b28b0737698bffe144098bf27f046498b78369b5d1eef32ad98874b743609591e1294a5a345bc1e7f56607e367dc9a9169c226bc63e70b0288f46606d2af136be3c8004336807ed3ded5d77e434c7300bc28292509237538aafc99193c513884e73b8a604a9561b0f1dc499e91f510724fe66e5a9644746d4db4b3cc693cd4b9d2e51b4ee501765b606def50003a221dd6b97e5c716035ea4d01cdcc3aa8dcf48f76a1861ec706c62318f636f2f58a8aac23ccd571f05a4c9a7917b78a9d6fbaf46636fda1a8f93b9d42b2533a2c3d0c274d8f63cde9a04a4b4970b8fc14078d510d2f681bfbacda7d1e634184de589de294ca929c3b929c12e54e30af98240974e8ccbba984978cdb059a875ebcc6abbc6f078200758c2d6fd0a66858a3cf7c8b557e8891fa47a6169f515da53cb7a9011d5a3e527a328523d3a3477e099304ca9b8d923e97c5186d505dcaee0900a907d09822cdf5f3413aee152d5c997550dfbc697fc7ac95c84771cf57ba2d287106a23ed2d782802dec9f306993be30b04261b1db85315f7df8e1da7bc56409c69fea2300eba0db347365d47e81afe2406c3dc360ea240485fcf74c4f7c6d0612bdc252e4042b94a47fe8133dd4d582df657a7eaf37d99a7a433319e704f7edeea4e134192f98a108f698dc76a2edf69cc0d4320d94fe308cd15486fcbaef5e4b494e413583e2005f6aa9eb5adb8a4791db9c7d003eaa75afbd54e4fc1ac7cfa484c0094326ba08fda2046f837f24dda92941ca990888bf5ba8b7fa09218f23565a58d5023bdedb01dd4e1c13856a3c1c84cb6ab9d9112647e23745d790cd969c5790cae6e23a317f6b8890073fa14bb3241f17f1aebde7474ab6e09431b1323ce439624b6ecad76f50bc2902b85fcf19aa510c632e996a8583f48298462e5f9a82692e15b28033e8725ef8bd2ad8dffd8e902d69815a74ba1a4ad417cb04b0ae788552cc845f5caf82860088a0a4f1fd5e38329d7965dc8680b976b522f547c2c5d3d514e3bc36d83ef6ff8323e9a1c0d3c020292a95e41176d5f8dca0c50bcd563f20b37ddad87d9eaf20c19597e3ddb1ead45ffc9ab8336860e0de506614f3c59871fef098e70028c50c6f997a72c40abbcdbafc2fe5a630546799afbc2104f6b8a59872a8c30a952960f61d290c845379b0e0fdd8b94820309f90f1edf82eb15f5e06f56bbd492d3067e56fc4d71b75145c647b89c71c75061ffec4064cf8123ba118672aeb5727f11f3937f12dbd8252c20435a670fdfea209ce4f7ff8c027048f5edd612e9e59273bf091e9331a36000b5cbd7798a148c029d6b62b81e7ce16c2fb6f849baf982f6830a13055805ad2052a792a27a42141ddcaa5d926089f8d0b0a100983c925b1230a6363a59a2477af5a46432a2fca1972c4f72da041ab06c11bc9f5da57874b548a8c9315680b19a00ad77260d574eafe9d3eabba919014dee88b814f281b8b9eb5a3d3457a6e3437b9c89b133a4332bc1157776927b54ed4ed439d28dc3f1cdb0a879648f1d938b64a86a335a46f2c162bd57b7445c2a4bf44d30e3823f20b8b7b2b398fd3bb2e5f9ca16b1b6a9e022c72bd3f695beb8e67731e84877910d4899f13a1af7649ecc4b9a12686941f11fa30c86b47881657550dd310b84e3c0ac59f387b8c8d8b81ce687003a910c59efeccce38758abb00f6ed96eee70439d8c75977f1deb606d60871b946dbe66688b399e1e36d39c9bd2d63f5508978604a54961a74e2c059abe039a38a8f17bda8596938c30e27f3529d51da8a3b9c8ec2c69dadc71b3ee1d86052663eafe4926b631f8f4d318dfd5de6346a3421f35b8563af42309908d9d2a2584e5817cfd18230c1aaeb960b5e33592b75ff73423132b5dffb09483ce7e567ff8327beafb237e98bdf8363af2109ec34256f10d4438fedbbc3b94936309704abef8b31a084d2d9dbe1302d456c3d2d5035987b343f9a71c5ed30037417a9395393042ab7cd887e294b44a6a62eef75376264311bbd70081769c4efaaf1d74852e68c58d88edbabb77d309a4ddce988b3c43d4cd6512d846e819553eaaf076572776e0b6c0a59c79b5fc4f9f0e1a7fe7fac94adf3d775c1fb9b1f90ef9c9bb1630a764e882a6a189406133519c4d90abd9ad218e83ee9a8eb526bdd44380ebf4ad9733b746ca8998cb92fbee945a4c3cfd701ee48040a9c144fd4dd9c5002885f5e91d843453940197868393885e4dcb251d2213d80f49ca4255075ca82fd8daf6ea02f4d6ba407bd0dab4af333b8f121f55d8f35fb06b2761ee4fb6eb8c114c3b6863485bf421d1c577e5ae94b1f8f803d2eb34d3c23987daf26ba9b89a3e6e5fb58c2be76ebabd93d5657b8b2ec968cf0cbe069d4a882f5cf94368fdee53a0bda98089037d3abed82ee1ab24fa11c1b611eb05ad41a46c6e0fd04557c3c863a1eefa7dae88da041adfae13f79168a83f6fed71c3093f8eb3d0f3b33eda6519fa62328bd15c1b68a56e297b746f1999473b2c48a92e009411f9290c09b83418ac143f2de873db66723c7f688453efc4639b077754d3402117e97d5b5cf5e167d16b2e844c0c7a47df7bd1e97598d668dafd80a389d99cf6a8e6b2892e4661e804ce0f9ded5da6dd5772388791d105f68299a4cae002231a57418da3ccb940b5760954221a15e1641b35062f8cc9ef58ef7d879900b22e16f5cf08724cbfd67dde844fe84df7ce53369453208ced2cf5cd56eaaf3f13ccba6d285834f9e1aec19b4bf7b9291ce24528923336799bb195f7afb6c5c20258f6fa6dc245b49445d0ba692bf452dade628071e427082999ccbd29a23e7755a439d71a16ef8e8b27a2d8821b6a494aebd342fe3a55a2352ddb3f3d73ee63d2de9205f368d998e8f547020dc9b43563e978671a9d07daa243705b80e1a440c0bac480c77b2a58fbab163b4351c71cf14cf61d67898c76dbdddb311b4b6cfca92b34f9d989cab330ae070f3fe5024a2a63dd58dc374ed7bef23b95255c928c87ec5b0414477c087dc6b28db650ea95699aefac533021fd19f63e2694eed562c3d62662680ecc2fb54fe5410d02bbec95b3c69c786390d1998afc9a009727f896c211a83ef0fb5065c723e0d04ac06a7f8e9c9522d78c6f88f4cd17733f56699543443377491fc38ae7edfe5af711bae4d41e6ee01c56f6ad8c48a2a59effb68b62b955ec1b9cc24797f8814a5489ac3212380e3d96a21e57f3f7ae9788b8b4d27a48cd86663844f6d6eb85c0c7776c9e91b6c1e69e8cd4aaa9ab59ed1276f5d9d05888385ff5caa305e55f55fe8f2c1ac4d5a32edb72bcc0a4eb8528b515d05b8000c6101bc766dbf5d73d63a71cc91811d0a22254fd39cccaf5433b878f304bbf75d781e841070bd69e50d453440667ee5e97847ccbcff7422a4d942da5bed58bb2d92aaf8c17df81c7a955183be1dd0bb6a133528364061d29e2c2b18b95898c5cac4e0191d733828fcaaa9e85849f741984e0c682cd555c4abc849a2ac28e99e6de22c5a445b03e6ad66b95596b4bf95f793aa7d5e8b3e2d76b86f4f8c3e8fac9ed76526815cc2a6acdf18eebf685df994da80ca889ee3d654f6bf9949c78ed806066729084cc198e42a550b2d49718a3da01bddfd3f68ccd9a3b868979c4948b24832b5320197a641585e16551d43c51ca6c5f681e636fc20e019375e5d0539cf0ba1e69fde3627c6da093ff60bc2fc3fe0166befd94b73515b1520befa7aa16c40afbede62e14cc030cefbcf21ac3268f7589c2e34a7c311f31789305c12b6e2613aed5c67b0e7d6d9f5c49970bcca81962b62568f4bbb3e3f4c114e40d12048f2afe06b4130d2c68c8c4fcb6f967e438e49dd84fca6e17b4273c2a0d71fa782dcb5ccfff9307e9000d6e30945d7d46390e44c3be3bee65fec440f81d42715cc88806d68b379824e56d41e08e77ae964150072402a0c8c56a65198782b89788d83ea45d0d51121d35992b64132a1582a338f2e1197899300282fcba4717db4b1b2420806abbe38a28914d406e4de3036b40da2101ad621d0ab38498f1b48d913de50821b0b65cf00c638a40a8f70861d9865d3dc1f1da1113f65948d1da04fc496439aab4d37f3cf5dd28bea9805e6cfd6397d09790da6eba1583e596c3724b5fef6a5365e930db871dc0a5adca96cf9d02856a966a6694a623b42da5170b92b935291d005eccf8178a118a2cf5ddb426e32838d37f095168f057f547756e3e662126a4e32568beec086c4392fcd092fcaa972cc641be557e2db22d061f0f5770e89b5ba2400398ba17ff22d628f8128f1a0c6bdda8617be697f9d76a1ad45be543e1de578430936f08ea9e26f6d11b689fc171b2699bcea1d0c4eef2ad10f3a469dd389258e2709c97db680541775586c2fa09334c934e101c8a11296816d07abea9f0ee2b172f0f989f7a1dd04edb394a8d9210ed1bab5c06f827b9957869c74b16e109da801db764a82ddfe97edffd06440da141a119787c67a1833e0c83ef29b7b8e911f4eff39c7ad4b9d2143db8be5888b7d5ac3edc1b93a6750066868abc6b834ef9e7d335392214ead4da09941ff326b1b893e1aa69950032d70ca2bf22d10f67e74b0c5d57ac4a100b9bfeb3efe409ef5f5787f0659b7204be6af6a5ab7f5ea7d5bf2bf5db774938d2c829b9270d04505df3e68d7b2ce42fe82c873d8e21c17eead5ca43aa93afd0d1fe0c40821c31a9c69be5baac33f80f216ffee7c56ec105ba539cdb1001584b70f34a01e92c9c7481bde135dd90f8aa779d3fde8c998540cb7078bc52fd1889d8fe582181e2ab91b7f08294281f2132b458261adda79be3220b5145886a0b51ce171ba2ba2d3059a30b829fb31ef045"}}, &(0x7f0000002d00)=0x0) timer_settime(r3, 0x1, &(0x7f0000002d40)={{0x77359400}}, &(0x7f0000002d80)) sched_rr_get_interval(r1, &(0x7f0000002dc0)) listxattr(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)=""/107, 0x6b) mkdir(&(0x7f0000002ec0)='./file0\x00', 0x2) timer_gettime(r3, &(0x7f0000002f00)) setsockopt$inet_buf(r0, 0x0, 0x3b, &(0x7f0000002f40)="fa30f589bed2273e819043090657f3689f41550621e03d420d8357fbed1d424af31f3bdfa5b10a493d9a8d08f92b1516c90e69654fa9081c614465815ee3440e621c560a709e0659d90d9d536b66c6f440873b3dba9ba0db243f0f642e66260057128588ed27efc5f4dfb36ba87ef23503c310d1ca8e3d07785bc763339d45cfdd771977f835ff6621a3892d5aeaf7762da2465610b52a68325d33e39b0360392fc14a5f8b7fc646", 0xa8) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000003000)=0x4) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000031c0)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003180)={&(0x7f0000003080)={0xfc, r2, 0xb08, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x19d6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3259}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x4000) linkat(r0, &(0x7f0000003200)='./file0\x00', r0, &(0x7f0000003240)='./file0\x00', 0x400) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000003280)={{0x2, 0x4e21, @broadcast}, {0x7, @random="1bcdbd2362c2"}, 0x8, {0x2, 0x4e20, @loopback}, 'dummy0\x00'}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000003700)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003340)={0x364, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x15}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @remote, 0xd1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x171e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x41b580000000}]}, @TIPC_NLA_MEDIA={0x158, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b53}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeec}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffc5a9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x36}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b56}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x20004815}, 0x4040) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003740)) 00:36:46 executing program 1: mknod$loop(&(0x7f0000000580)='./file0\x00', 0x83e, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fcb8327ef8bde77463aa3c16ff643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@v2={0x5, 0x3, 0xc, 0x3f, 0xf2, "9c26562dad78dbc2c1daeb25c9e42032a38b256e0f6d2cdc3ff4a19879ba701005b196c0b129382921164b306d777c6772d3f19569a1106137a74446fed8369d24d99f3bbe7d2aa9a5a1316bcb26526a66421f0cbb0f379c6cb62988c4435733b7be562b5c7b255954326169d656e5760b252aa1c835e35838c7fade2c657ddb97a01101a7959c54f24068d94bb57d74a461b452984fdcfce2364cbd28484af9cf74e115710baba6cf7428b7b4781fe3480c21cf8d46cb0487ef6d0a8a868b4f755c6174b30b02b8c24fa14d6b4e8e94968e4da1169f1cc07ba1ac8c42fbfaa8f22b085cc1342d528563ecfe8a0f71a5f377"}, 0xfc, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r2, 0x402, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) 00:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:46 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000480)={'vlan0\x00', 0xffffffffffffffe1}) fcntl$lock(r0, 0x24, &(0x7f0000000100)) r2 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockname$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000440)={&(0x7f0000000a40)={0x28, r11, 0x100, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) setfsgid(r15) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="02000000010005000000000002000100", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000500", @ANYRES32=r5, @ANYBLOB="0000000180e4685732172882c40f06200dcae63fe4066339a82b2581a0be4c4d5cc48b50449a4692b969ac95f78dc12ee2208a091e6352866a88d426118b8cee0a7a9f234e3859c88ac140ca62194b3bd5c521fc67d3aa70abda6b4bac67d357af08dcd2000059d1537341780ead032672264fd4c255ba7c4ef76f1b06b11869ec7fe24bce9f993bcbb3ff8fa700639d3738e2ac162dc61601a8e18cea8b81282faeeff582ca3649b36cf3326f45c2f5ce6816d804552b10ef5a58d4a248887ae3fbddec20babd958b1e59f57328bae90041cc9b17a7cb43f0b517cb65c643fc5f2d2ad3340dcd24359fd2860a33", @ANYRES32=r6, @ANYBLOB="02000000", @ANYRES32=r7, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="040006000000000008000200", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r14, @ANYBLOB="08000200", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="10000100000000002000000000000000"], 0x84, 0x1) socket(0x3, 0x4, 0x6) 00:36:46 executing program 0: r0 = socket(0x9, 0x8, 0x75) setsockopt(r0, 0x101, 0x3de86f87, &(0x7f0000000000)="010000000000060000071a80000001cc", 0xfffffd5e) close(r0) 00:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 287.111697] binder: 12070:12073 unknown command 1 [ 287.118674] binder: 12070:12073 ioctl c0306201 20000580 returned -22 00:36:46 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r0, 0x400) lseek(r1, 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="a98890497165349f5acb4dc66d8c25bfd19072d783e81f41055a08eadaa1c51bb7a7472dfa766b771dad427d2444ab699402ff647fcc36bfe4fc7dcdb9202b0bf333aa2c353ba7d8e8059d54f55fa4f1eb5118cd44fff1c598ee144b90bcd8d5f36a07d682d44456b0df188f7931f1b4"], 0x70) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x401) fcntl$setstatus(r1, 0x4, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ftruncate(0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @multicast2}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./bus\x00', r3, r4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 00:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x10000) close(r0) fcntl$addseals(r1, 0x409, 0x2) r2 = socket(0x5, 0xf, 0x101) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) 00:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:46 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) [ 287.154466] binder: 12089:12090 unknown command 1 [ 287.161172] binder: 12089:12090 ioctl c0306201 20000580 returned -22 00:36:46 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) unlink(&(0x7f0000000080)='./file0\x00') clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x4) r1 = gettid() mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='duvpts\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ftruncate(r0, 0x0) 00:36:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000800)=[{&(0x7f00000008c0)="c54c6cc3665f10f455c20486bf8dbb981c80f9295793c2fd53a6a60ee2637f447cdff8fe0b2fd7b75af23011a3f6b8e0d3c9a330f6d2f67a8ea280472168201ce83014a7ca21835493a72f488d2b558e68ee1516a0fbeefa5c58462b14b1678dee399d83684c9b6c429a04a96d687231404a2f7f5d9bcf2df0ac606ef2491055"}, {&(0x7f0000000200)="353ba55d34a5aa151259fdfd50a131dcb4d9caed19c1c79961c1f84197df70f8177cf47b14740e82b16c67506b9eb209182b45618f2cc8620e45f950f54735d6e2347e45bde52f8800e4b8f5dc2edb6564de969dffbe"}, {&(0x7f0000000280)="439fc82f8abb6f7d07df2e6a8bb5825677d1a9623329da4044f402a8d869d5b63d03aae062da2167a4feb9efccb79ae955168eca1779ad50585317e2790b8eb7fe175244427107aa51bd19748efaf9bbc122a2cb4c8044fc289b0dd06c78a4dae47463a950b71eb01f601e60a0cb5ca2c223a85cf341707761e637daa81099f91ee1ed8707d45489de42b142585eff751eca004909c56c769607ddef4b9d384c943f1ab4742e9b5dbece54f9d2da130dfeac9e9cd51007aa57bf259806ec73ae1abd5a442e4d895d678e6f8e05fa37639e38334ff04d782fa154138ad4dfade20c01992e561229d07708"}, {&(0x7f0000000380)="83e6cd117b38370a62bfeab6f98016ef57195b795211e0f634d7882e82941e79760a0af689506f688b421483aacdac713a8e361e6bf2e350d0a6f6749fed3abb9024bc4082dd3767cf0766472c762361d3eace8f5d"}, {&(0x7f0000000400)="a26af9d6836e5124ebbef7aa9e95ba4d7600d9f011fd2bdfaabcd023068fdd9cc039c4f4fd616431c1ae7dae9da2ccc59bb908cdee2a544bc0e6718153a36da96004d6d672da8d9dac965986d97a090700fdab1da04005e8ff6de1d89d0e7c2801c377a66ebe37e17cafdb424c1fed7d185e912fb448e39c532234751ec987cceab8", 0x166}, {&(0x7f00000004c0)="13b93f363401d96f4cc33344632a585588cbe64b254c1405c521898dd0e17c3dc05624d9891b4b7e33da798691876c46355ff7b6f2d91721d05fa06098fb90132e26c1046a725977a3b312d2e9b0521b9b55e612d8cc0237202fe060a2bf09febe41bbf3ebfb9d6ed7919659e9d23cd52e1a031e9e69b69078256c3eb23be48cea5c53e9d4cf87843a8d14e806488f73832c3cb1d6019773ce2075bcf408b81e7c89e1620133a2cd69c20777007db8f7a539cd0778eb80597d04a7e6035e0686def70be6a93b88101ebbe656b15c29ee5454982b649570d81ebd"}, {&(0x7f00000005c0)="4f693614ce00e1ba2e047b685bfd6dfeec13b43e2ab086579350a6f670a59cc87df14e15e9aef8f5e5571d7bbdc83c6219b803b5bbc9d82f53e3c7f6539788ce416d0a98e129e5c14316154ecee6f50467e8592c0cf45d251d5a6532a80814e35055c03f083a0bc3f085b6bda670a80aefbbb5ac351335b28430b3bcd1009c30513ec1a9a14f1e7576043587117d598f44131c89922168d6f7fd379d2ea3bf2a60daaa21849eeaecafe5"}, {&(0x7f0000000680)="882c28683565a3d9b46c454d21996431c1eb7034cb2491fca247bbcc8be7e336acb8d077b285caeec36f981f9f94b1b993ae6d741da63261c9f2c3b86e5e90e5d4ae4c4b8a7daa3fcbf6b43899e748a05d505087e0973f794056230f3406926b337be99a616661f479bcb2de359359041b3631f3e9741870eb5e030530f372bb0c5e"}, {&(0x7f0000000740)="1ca260a9956a7738fb8b241ecd13398c939052686032b52d5dd1fe549534ebe1ad1080e197c79ae0259277d0aa6daad5a7910e89a338676a7a53b0c067a613059ea3db5b5c3f390f4f3d8a91287bd6cacf6eeb6b48368cf37d77f01664c788a7c78c8fec756a8a7bca5711"}, {&(0x7f00000007c0)="0c81d473ad6baa832176301217b4354696a7100a193b90c304d0b64e69e22027b87c638c64dd1fdf9ec5c44c7704ab9cc2506779780f7b13bd04ab"}], 0x1be) 00:36:46 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6700000000000000000000000000006e6120e32c8042b67b2d8f4dac8739d474d13bfaf50c78a9b5be", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:36:46 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffff03c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38c9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd1c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x561b}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) close(r0) 00:36:46 executing program 5: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) r1 = getpid() ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0x5, 0x0, 0xffffffffffffff80}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.events\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000340)) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x205, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x4) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000140)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8) 00:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 00:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 00:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 287.966398] binder: 12145:12147 ioctl c0306201 0 returned -14 [ 287.989968] binder: 12151:12153 ioctl c0306201 0 returned -14 00:36:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:36:46 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', '\xeb}em1bdev\x00'}, 0xf) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 288.013545] binder: 12163:12164 ioctl c0306201 0 returned -14 00:36:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) fstat(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000680)=0xe8) r8 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000800)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) r11 = geteuid() r12 = getegid() getgroups(0x4, &(0x7f0000000940)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getgroups(0x4, &(0x7f0000000980)=[0xffffffffffffffff, 0xee00, 0x0, 0x0]) r15 = getegid() r16 = getegid() fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {0x1, 0x6}, [{0x2, 0x5, r3}, {0x2, 0x0, r4}, {0x2, 0x6, r5}, {0x2, 0x2, r6}, {0x2, 0x7, r7}, {0x2, 0x4, r8}, {0x2, 0x0, r9}, {0x2, 0x4, r10}, {0x2, 0x0, r11}], {}, [{0x8, 0x1, r12}, {0x8, 0x2, r13}, {0x8, 0x4, r14}, {0x8, 0x4, r15}, {0x8, 0x3, r16}], {0x10, 0x2}, {0x20, 0x4}}, 0x94, 0x1) 00:36:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:36:47 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:47 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='group_id', 0x8, 0x2) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:47 executing program 3: mkdir(0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) add_key(&(0x7f0000000100)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r3 = memfd_create(&(0x7f00000001c0)='/delo\xff\a\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2b0100001094", 0x6}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x2000006) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000001}, 0xc, &(0x7f00000002c0)={0x0, 0x10f}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004580), &(0x7f00000045c0)=0xc) getpgid(0xffffffffffffffff) getresuid(&(0x7f0000004780), &(0x7f00000047c0), &(0x7f0000004800)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000004940)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000007380)={{{@in6=@initdev, @in=@dev}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000007480)=0xe8) lstat(&(0x7f0000007e00)='./file0/../file0\x00', &(0x7f0000007e40)) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000007fc0)) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008100)={{{@in=@dev, @in=@empty}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000008200)=0xe8) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000008440)) fcntl$getown(r1, 0x9) 00:36:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:36:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x10c00, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x12, &(0x7f0000000140)='/dev/input/event#\x00', 0xffffffffffffffff}, 0x30) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20001, 0x0) write$eventfd(r2, &(0x7f0000000080)=0x800, 0x8) ioctl$EVIOCGRAB(r0, 0x40044591, 0x0) 00:36:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x3) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x19, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r0, 0x4, 0x42c07) 00:36:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}) 00:36:49 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) chmod(&(0x7f0000000000)='./file0\x00', 0x100) 00:36:49 executing program 0: r0 = socket(0x9, 0x200000000002, 0x200) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}) 00:36:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}) 00:36:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 00:36:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 00:36:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x2, 0xfffffffffffffffa) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 00:36:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 00:36:50 executing program 0: r0 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="550fbf0fb5bff1f1be7cd34ca1f29a793b819af0cb58343b8eff2797911ecae806fef68c41bc8e8f7762d4b2cff56e08ac62876ce8cfe7b71de1cbe6dfa3ea52ac40d05673d29b24722609c06652d9ca3742505886bb56f05df30d2777ae6167217172dc4fa77c9677", 0x69, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f00000001c0)=""/73, 0x49) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x204000, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040), &(0x7f0000000080)) close(r1) 00:36:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x5, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0663044000"], 0x0, 0x0, 0x0}) 00:36:50 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd\"', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:36:50 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000200)={0x7}, 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) getresuid(&(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000ac0)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000009c0)=0xe8) getresuid(&(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)=0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x9, &(0x7f0000000680)=[{&(0x7f0000000140)="3e3a66b5bc3e71d954c4519a84b7f5359b8bbd20663f68d54de8e078e45e17d5cbca96ea1b3c018a4199881da1c59b0e8638d83ea2cee6b482264b69fc000d8c2c33f5c761c028", 0x47, 0x1ff}, {&(0x7f0000000240)="a96c697c178a8e3c2d45d93c8ac3e30cac06e454d285919ae367678e08e475b9f7d06adfc26fad4b4ce986f745b73cbed9", 0x31}, {&(0x7f0000000280)="44e5c4cb62e83b589d27c999fcfc18baba770b31e6125f8f1e9a8177e06135b1427556b8b1728bc385e08c7947ff4faba8d915a5cf49a6ba17eb0a5be763cbb2d17f649f51d17c68441ca49ffab5b16e1c87ff370deaf88a49bbc2a162efb2555f8dd29f416917197af54d798f6a9514a5065b27b1", 0x75, 0x6}, {&(0x7f0000000300)="971ca11492cc6cab7d90eb4604d4c6840fb2b199933ec493671fce9c01df7c733832a42f1849470da2b89325a2f00036bda14734", 0x34, 0x3}, {&(0x7f0000000380)="0bba61a424ebd4c23b1cb5ac8d49f3f7c1b818795fdcdbd91dce56e42fd83e6e8e6ee56b51b3d5aff3579724175c34a86ebe8f9ae703c45da34ed9f8a19d2861330b89798e59c1db46f891974eac0959af73d6b7df922c128995c16b9d6be489ccf03aa21af3a2f36b430c136a0c35c5", 0x70, 0x1}, {&(0x7f0000000400)="23a1b0fc258bd7983cd43eb1d7b52857eaf66b73c6711f3d1d2fca2629fb1fbce964e9dbb36aba206585ce699206ca4c22ccb5c21dcdfc5676daa213ba8ee05bec375b3495525bc795265280fbd3ba8e0f48b72487d10a1628f6319fac88f998d5b78cb23cf25a463bcb20f1cfec8e7c6b9b6293690275c4a374d1fa60df3b02100ad2089cbca2f1fc3fbfaf8c375b8c8558c2d4cf4433a485945c94a0e423b7de14c4cc565058d63b36fb1fce369d4db42de11ff168", 0xb6, 0xed6}, {&(0x7f00000004c0)="aafcdb380f0976740973395579b624044e9f3dd6f69a663836e86be4", 0x1c, 0x6}, {&(0x7f0000000500)="44fa944eba9686e2699d19a0ba2a1e6d256cec15a81533395ab7baa581df21b11c489d2df041715ca31e214fc4500608178b2d6f4c5133a4a9909925d6a336dff16b0c285cfbf6e803dc921165312d49ada61653f67803ad97028e03e307dc44c1f304e05be59474248a9af016", 0x6d, 0x3}, {&(0x7f0000000580)="e78a1b07defa43d20939b821cdca571bb1d040e13bfa93ecc44ba637f1518dc4d7af7fe8c490c9a140eb872361ca76ec6e4eec2f939cc2ceed587097a4a7dd26b90b77350c291ca1f0a12a5f1efb810eb91ac0c99bc93800c5cc70e13078d4e0431d400ac2a3dde84fe7476ca6b25888b56a75e9969f3e05364cc2462345b2c1099aac643a8b37576b3963d48f867b10d744f0490f08b3f01f7b92131ad14488467b4f9f5cc87af479d8f9745155452a83368419a4ac6a8f557537b8d534a5d2d65f0001", 0xc4, 0x1}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=r1, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',uid=', @ANYRESDEC=r4, @ANYBLOB=',permit_directio,smackfsfloor=em0GPLcgroupQ,uid=', @ANYRESDEC=r6, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f726f6c651f773d656d30656d306c6f2d2c646f6e745f686173682c736d61636b66737472616e736d7574653d652d002fc7cd6248f1ffea217c1eba25b3ef146d8ba5bce05df830e0e3aab139594fe6eff09737af4b5f7524c3d0d67c5922f12b6bce34401d23d21a1b0f3db1d9ae325a53eb49dad5a9281d2b2a3b704976da3a15401e"]) r7 = open(&(0x7f0000000340)='./bus\x00', 0x141046, 0x0) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000101}) fallocate(r7, 0x28, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='fuse\x00', 0x9, &(0x7f0000000d40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@subj_type={'subj_type', 0x3d, '@user'}}, {@euid_eq={'euid', 0x3d, r5}}]}}) fsetxattr$security_selinux(r7, &(0x7f0000000b80)='security.selinux\x00', &(0x7f0000000bc0)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x2) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000e80)='ip6gretap0\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8, 0x2}) 00:36:50 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x6, &(0x7f0000000000)='proc\x1d\x00', 0xffffffffffffffff}, 0x30) sched_getattr(r0, &(0x7f00000000c0), 0x30, 0x0) ftruncate(r1, 0x207) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='m\xb3\xef\x99\x8f\xe9\\W\xe9\x0f\xe9\x90\xd2\x909ps\x00') r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r4) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r5) alarm(0x100000001) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 00:36:50 executing program 0: r0 = socket(0x8, 0x2, 0x7) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/70) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000011c0)={r1, &(0x7f00000000c0)="debc287f4037fc21200d0c8791b3fda7e73fd565010ab3d62f61df9c7187cd1c9a06b38c235ff3f5ebe966e02a47362085f477e9aaaeee0129f334f2272586b5336af0b33d653f6040b6a042bccaae77710f78c6cba0a8abd9054f0c0752b27d14e928898e242e031ebf3b2f768feeef0e7aaa631f5e5c526352491fffe7de6d87f89629029850400a52e9c7214b23d1e2b1ec7f9869c855d1371c18ff0f56e55ef3dbcc12a631b5fca3ff682dee7a7b1a8985143c59efe545ab5357d0bbeb61717e15abdb76b9192684e0b66816e6a5cd6dd1d6687b9ebe9e8e9cbdec87cec37e78f071f2724b2a8f5aca8a243040ac13d40b", &(0x7f00000001c0)=""/4096}, 0x18) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001240)={0x400, {{0xa, 0x4e24, 0x3, @rand_addr="38b74f4c65ed5bda92e986afed2c0045", 0xfffffffffffff09c}}}, 0x88) close(r0) ioctl$KDDISABIO(r1, 0x4b37) 00:36:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) write$P9_RGETATTR(r0, &(0x7f0000000480)={0xa0, 0x19, 0x1, {0x200, {0x98, 0x4, 0x5}, 0x1c, r3, r4, 0x3, 0x6, 0x7, 0x7fff, 0x80000001, 0x1, 0x6, 0x6, 0x3ff, 0x1000, 0x99, 0x80, 0x8, 0x8, 0x10001}}, 0xa0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f0000000580)={0x4, 0x70, 0xfffffffffffffffb, 0x5, 0x7fffffff, 0x3, 0x0, 0x3, 0x10000, 0x0, 0xa95, 0x6, 0x3, 0x1, 0xd2, 0x2, 0x1, 0x4, 0xb3, 0x1, 0x6, 0x8, 0x0, 0xf62, 0xa1f0, 0x6, 0x101, 0x6, 0x1, 0x4, 0x100, 0x8, 0x4, 0x8, 0x6, 0x81, 0xe023, 0x2, 0x0, 0x20000, 0x4, @perf_bp={&(0x7f0000000540), 0xa}, 0x400, 0xffff, 0x2c, 0x5, 0x8, 0x9, 0x2}, r0, 0x10, 0xffffffffffffff9c, 0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x117, 0x0, 0xc41, 0x370, 0x16, 0x80, 0x7c0000000, 0x7f, 0x0, 0x1000, 0x5}) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000140)={0x1, {{0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}}, {{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}}, 0x108) 00:36:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x5, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0663044000"], 0x0, 0x0, 0x0}) 00:36:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="df764b995324f5c6416fbd68259ab4d1"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@broadcast, 0x4e20, 0x0, 0x4e22, 0x7, 0x2, 0x80, 0x20, 0x2f, r2, r3}, {0x1, 0x4, 0x401, 0x80, 0x7, 0xe5, 0x7f, 0x3f}, {0x1ff, 0x7f, 0x7f, 0x7ff}, 0x53ed, 0x6e6bb4, 0x1, 0x1, 0x3, 0x3}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in, 0x0, 0x4, 0x3, 0x9, 0x800, 0x20, 0x81}}, 0xe8) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/user\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000480)={0x0, @aes256}) 00:36:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x5, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0663044000"], 0x0, 0x0, 0x0}) 00:36:50 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) close(r0) [ 291.990157] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 292.000479] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 292.016440] F2FS-fs (loop3): Unable to read 2th superblock 00:36:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x7, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06630440000000"], 0x0, 0x0, 0x0}) 00:36:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x7, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06630440000000"], 0x0, 0x0, 0x0}) 00:36:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x7, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06630440000000"], 0x0, 0x0, 0x0}) [ 292.038614] audit: type=1400 audit(1552437410.967:35): avc: denied { relabelto } for pid=12274 comm="syz-executor.3" name="bus" dev="sda1" ino=16702 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 292.039418] audit: type=1400 audit(1552437410.967:36): avc: denied { ioctl } for pid=12274 comm="syz-executor.3" path="/root/syzkaller-testdir097460937/syzkaller.ww1s8C/477/bus" dev="sda1" ino=16702 ioctlcmd=0x660f scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 292.071460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12295 comm=syz-executor.5 [ 292.075419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12307 comm=syz-executor.5 [ 292.137838] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 292.145462] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 292.153653] F2FS-fs (loop3): Unable to read 2th superblock [ 292.193631] audit: type=1400 audit(1552437411.117:37): avc: denied { write } for pid=12274 comm="syz-executor.3" name="bus" dev="sda1" ino=16702 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 292.220422] audit: type=1400 audit(1552437411.147:38): avc: denied { open } for pid=12274 comm="syz-executor.3" path="/root/syzkaller-testdir097460937/syzkaller.ww1s8C/477/bus" dev="sda1" ino=16702 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 292.255991] audit: type=1400 audit(1552437411.187:39): avc: denied { read } for pid=12274 comm="syz-executor.3" name="bus" dev="sda1" ino=16702 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 292.256660] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 292.256665] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 292.256683] F2FS-fs (loop3): Unable to read 2th superblock [ 292.256724] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 292.256729] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 292.256742] F2FS-fs (loop3): Unable to read 2th superblock [ 292.318332] audit: type=1400 audit(1552437411.247:40): avc: denied { relabelfrom } for pid=12274 comm="syz-executor.3" name="bus" dev="sda1" ino=16702 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 00:36:51 executing program 3: accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) r0 = memfd_create(0x0, 0x6) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000400)) memfd_create(0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000480)="06a17dd6993ddb9d570db34919a8665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc595776e321a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd665754a60848efc47be11daf2e20000000000000000000000") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x8105) sendfile(r2, r3, 0x0, 0x2008004fffffffe) sendfile(r1, r1, &(0x7f00000001c0)=0x3, 0xa198) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 00:36:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0663044000000000"], 0x0, 0x0, 0x0}) 00:36:51 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7}, 0x7) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) write$binfmt_misc(r1, &(0x7f0000003e00)=ANY=[@ANYPTR=&(0x7f0000003bc0)=ANY=[@ANYPTR, @ANYBLOB="d78f5c8f72c9cfd1b90ff989092c30aecfef4a63946b847d9761def1f3a3d6153bec9128e177e570174c2147907eabdffaf78ea93a", @ANYRES32=r3, @ANYBLOB="272efa440e4300c4248d455f19fe16e551a91faa4cd6e9e728a6ef2087fb8363516bcb", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64=r1], @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=0x0, @ANYRESDEC=r3, @ANYRES64=r2, @ANYPTR64=&(0x7f0000003ac0)=ANY=[@ANYRESOCT=r3, @ANYRESDEC, @ANYPTR, @ANYPTR, @ANYRES16=0x0, @ANYPTR64=&(0x7f0000003a40)=ANY=[@ANYPTR64], @ANYPTR=&(0x7f0000003a80)=ANY=[@ANYPTR64], @ANYRESOCT=r1, @ANYRES64=0x0], @ANYRESOCT=r0, @ANYPTR=&(0x7f0000003dc0)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES32=r0, @ANYRESDEC=r3, @ANYPTR=&(0x7f0000003d80)=ANY=[@ANYRES32=r0]]], 0x55) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, &(0x7f0000000440)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000001440)=@pppol2tpin6, 0x80, &(0x7f0000001880)=[{&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f00000014c0)=""/89, 0x59}, {&(0x7f0000001540)=""/216, 0xd8}, {&(0x7f0000001640)=""/235, 0xeb}, {&(0x7f0000001740)=""/94, 0x5e}, {&(0x7f00000017c0)=""/145, 0x91}], 0x6, &(0x7f0000001900)=""/227, 0xe3}, 0x4f75d9d8}, {{&(0x7f0000001a00)=@pppol2tpv3in6, 0x80, &(0x7f0000002000)=[{&(0x7f0000001a80)=""/255, 0xff}, {&(0x7f0000001b80)=""/96, 0x60}, {&(0x7f0000001c00)=""/155, 0x9b}, {&(0x7f0000001cc0)=""/133, 0x85}, {&(0x7f0000001d80)=""/107, 0x6b}, {&(0x7f0000001e00)=""/170, 0xaa}, {&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000001ec0)=""/86, 0x56}, {&(0x7f0000001f40)=""/57, 0x39}, {&(0x7f0000001f80)=""/115, 0x73}], 0xa, &(0x7f00000020c0)=""/123, 0x7b}, 0x3}, {{&(0x7f0000002140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003600)=[{&(0x7f00000021c0)=""/226, 0xe2}, {&(0x7f00000022c0)=""/155, 0x9b}, {&(0x7f0000002380)=""/239, 0xef}, {&(0x7f0000002480)=""/76, 0x4c}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/202, 0xca}], 0x6, &(0x7f0000003680)=""/247, 0xf7}, 0x1000}], 0x4, 0x2000, &(0x7f0000003880)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000003900)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:36:51 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',root\b\x00\x00\x00=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group]id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 292.367515] audit: type=1400 audit(1552437411.297:41): avc: denied { getattr } for pid=2129 comm="syz-executor.3" path="/root/syzkaller-testdir097460937/syzkaller.ww1s8C/477/bus" dev="sda1" ino=16702 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 [ 292.404126] audit: type=1400 audit(1552437411.327:42): avc: denied { unlink } for pid=2129 comm="syz-executor.3" name="bus" dev="sda1" ino=16702 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:apm_bios_t:s0 tclass=file permissive=1 00:36:51 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xfffffcba) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 00:36:51 executing program 0: socket$netlink(0x10, 0x3, 0x5) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x10001, 0x707, 0x10001, 0x400}, {0x1, 0x8, 0x0, 0x9}, {0x1ff, 0x0, 0x3, 0x5}, {0x5, 0xffff, 0x0, 0x9}]}, 0x10) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000740)={'sit0\x00', 0x6}) r2 = getpid() ptrace$pokeuser(0x6, r2, 0x8001, 0x8) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000140)=@ethernet={0x1, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)="d3b8bb0f463d031134658608d779ebf7b715413544bce552a9985c42eddf256e407b16f4d6f464ab7f4f66daa7f2e77a71c04c90fcf834768bc5aad3533220b42dd7294df53e7f5099885a79e60bd11827b075052a62929ee93986a519999b5eec8e7edba73942427b51ff651f40b5", 0x6f}, {&(0x7f0000000240)="2248dbaa0f96128628f150429bcb0c16cb2b78ee6f85ec80be9681cbfec68a", 0x1f}, {&(0x7f0000000280)="b36bfd3b8180b4cdf856d96ef67d5302de5b9d306089f9f78db0db1c7936965fe0bd844ecae51c258cb79c73cb778db3cd6f2138c9ada11897c790eeb6a87f0877ebbd8ce3f71bc47e71f0f08d4cfe1c2b4e892ad186f9ef83059d6460d9eac046b0b4deaa629359f1a9d672cc520d5b234410c7ed78a81d611b8d7ae68cd1e29326f36b281a0a5375a9505373", 0x8d}, {&(0x7f0000000340)="c4e17ad2da785cdabbdd5018e18ba6a54fa17e89dcc0fc79afb2349e1e0c615d0a980eb127316b6b2920a14531208ee296fc89bf449040d46ca742f3f0442f49d3d66ac0fa319a8093893f502edf75b692f785a82fd72c914fa6f0a3db7c646d34eae29b96580d3b07e7429f0e4d764e32dc1d55eb87aaa1e859bcb21a6f84de97c1a1391b405a78035539b515a2c3aea7af4f21132ba1862019cc0748d628da8e4d88d5573642e8d7ad15c53dcefd47312c361b422cc47d6220ebb81702a54ac3f6a18fc940e0fad721c7c598b6250aad545c60a6b4298141105aa5f8a1fb", 0xdf}, {&(0x7f0000000440)="eaab0bc174a0934416f1ae1bcd345d5c27defb7e17d9844e38e5b8e4b2d3d8", 0x1f}], 0x5, &(0x7f0000000500)=[{0x68, 0x115, 0x80000001, "eea3a9e56b0786ab0d98f94ca52f57f0005c66a11a28213be52597c63584521501ca9af8d415714dc79075fded2fd41f9a0ebd25ca99184e589ff908327a7306b92914585774875fb9f880cb44d44baaf6"}, {0x20, 0x117, 0x80, "616668616d61412c606d279c"}, {0x58, 0x115, 0x1, "0090acb972e4629074af4129608b73a2e573119fb42644947e6be7e9f1cb731291c1c6d6c947266a1e03859de39a5c7f28922b737821db09f97636a0b1239b01c3464861e675"}, {0x20, 0x118, 0x5, "7e0dd951b08fbe43ecb803654b85bc"}, {0x18, 0x109, 0x100, "dc"}, {0xc8, 0x18a, 0x7, "e2693bcf9ba47e95f08c9d96aea1143def8d37ed2abe968ca2bdd1cf6600b5bd5a20fbdb7653db19742fde5a8b8b4972f9d337657607a4de07c935741acb1157f1e9d391a79625c9b813a1f2768cda417601cfcfc3fb120536d82f1e0ec19eab124fdb123e55808b038cb5322f65b0d1da0b71ea23ed28807fc6f40f6287b9d53f6dc48517fa741a899ecdac55810f6ccd90051a3169167171481e1a6d38efad632892d94785abea5bbc0d2278fc51f0e306b94a10636d"}], 0x1e0}, 0x4000800) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000780)={0x2cf3, 0x0, 0x1000}, 0x4) close(r1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 00:36:51 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0663044000000000"], 0x0, 0x0, 0x0}) 00:36:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) getpriority(0x2, r1) r2 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000000)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r3, @multicast2, @broadcast}, 0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x58) 00:36:51 executing program 3: accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) r0 = memfd_create(0x0, 0x6) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000400)) memfd_create(0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000480)="06a17dd6993ddb9d570db34919a8665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc595776e321a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd665754a60848efc47be11daf2e20000000000000000000000") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r3, 0x8105) sendfile(r2, r3, 0x0, 0x2008004fffffffe) sendfile(r1, r1, &(0x7f00000001c0)=0x3, 0xa198) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 00:36:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0663044000000000"], 0x0, 0x0, 0x0}) 00:36:51 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x300, 0x0) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x8}, {r0, 0x2}], 0x2, &(0x7f00000001c0), &(0x7f0000000200)={0x8}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) dup2(r2, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x401200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000200000000000000"], 0x0, 0x0, 0x0}) 00:36:51 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xbffffffffffffffd, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x81fe, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x800000000000414, 0x0, 0x0, [{}]}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0/bus\x00', 0xc, 0x2) 00:36:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x45, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000140)="84ce273764693accbcd5d8aa9e50839a", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_CREATE(r2, &(0x7f0000000300)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000200)=""/219, 0xdb, 0x1, 0xbc, 0x0, 0x232, 0x4}, 0x120) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) connect$netlink(r3, &(0x7f00000001c0)=@unspec, 0xc) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) [ 292.901939] binder: 12373:12375 unknown command 512 [ 292.913168] binder: 12373:12375 ioctl c0306201 20000580 returned -22 00:36:51 executing program 0: accept(0xffffffffffffffff, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000240)=0x80) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000680)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={r0, 0x1, 0x6, @broadcast}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x238002, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000080)={@multicast2, @multicast1}, &(0x7f00000000c0)=0xc) r3 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='rose0\x00') setsockopt(r3, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r3) fsetxattr$security_smack_entry(r3, &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='\x00', 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 00:36:51 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0xfcb9}}], 0x1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff92) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x3) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) close(r2) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0xfffffffffffffffd) getpeername$netlink(r0, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x40, 0x1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) setns(0xffffffffffffffff, 0x0) getpgid(0x0) fcntl$getown(r1, 0x9) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000003c0)) r3 = gettid() getpgrp(r3) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)) getegid() getgroups(0x1fa, &(0x7f0000000240)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000dc0)) fcntl$getownex(r1, 0x10, &(0x7f0000000e00)) sendmsg$netlink(r2, &(0x7f0000000f80)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000cc0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="100007003f0004002abd7000fcdbdf2516571d9043f8fed5112b5ea8d411934f0457f8933078e82b4f89f4642738ce799ca372d3e1ddf3fa7204bc42b98cf7e3f985a6e4ea9fe97410cebfaf9e7a9c7422c97b026a0000000009000000"], 0x1}], 0x1, 0x0, 0x0, 0x4008045}, 0x8000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0xa, 0xfffffffffffffd40) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf32(r5, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x199, 0xf0ff7f) [ 292.955323] binder: 12373:12381 unknown command 512 [ 292.977290] binder: 12373:12381 ioctl c0306201 20000580 returned -22 00:36:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) write$selinux_validatetrans(r2, &(0x7f0000000280)={'system_u:object_r:tape_device_t:s0', 0x20, 'system_u:object_r:dhcpd_unit_file_t:s0', 0x20, 0x20009c, 0x20, 'unconfined\x00'}, 0xfffffffffffffed8) 00:36:52 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) close(r0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x10001) 00:36:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20004005, &(0x7f0000319ff0)={0x2, 0x4e20, @multicast2}, 0xfffffffffffffcc9) sendto$inet(r1, &(0x7f0000000280)="ed", 0x1, 0x2040000000009000, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000)="dd", 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 00:36:52 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4383416ef5d05dfe59e72b24fe0e8747e53ee6b3b63b434ee968c5c69592c86e50a21b15a8a70a53fb71e56dd2c7fde83cefdf39487b6996057cf1a8ad6f11ccc3f3e63e0abd7762a13b9d321c5958e07fb549968018bbb9f758765b0e2145327ca60efdfc41936038b59a553e658496975c0107dc03465ae553621652c6b97968", @ANYRES16=r1, @ANYBLOB="100225bd7000fbdbdf25010000000c0006000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x800) getdents64(r0, &(0x7f00000002c0)=""/95, 0x5f) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 00:36:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt6_stats\x00') ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x7) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x0, 0x3c47, 0x4}) 00:36:52 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) flistxattr(r2, &(0x7f0000000040)=""/43, 0x2b) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:52 executing program 5: r0 = dup(0xffffffffffffff9c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000900)='/dev/loop#\x00', 0x0, 0x100084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) write$tun(r0, &(0x7f00000004c0)={@void, @val={0x1, 0x7, 0x6, 0x200, 0x6, 0xa69}, @x25={0x3, 0x9ca, 0xf, "adc74649b8dd97de6f794e420d5287c14d3fbb3f2998c187dbc1f7d42fc1da7acf77037167679b63e3c7b9a18e2a15bcff809d07be68bd9b"}}, 0x45) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @multicast2}, &(0x7f00000007c0)=0xc) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="f3f513f3", @ANYRES16=r3, @ANYBLOB="00012bbd7000fedbdf25050000000c00030000000080000000000c0003008000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44010) sendfile(r1, r2, 0x0, 0x20000102000004) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) getxattr(0x0, 0x0, 0x0, 0x0) set_robust_list(&(0x7f0000000980)={0x0, 0x6, &(0x7f0000000940)={&(0x7f00000000c0)}}, 0x18) sendmsg$IPVS_CMD_GET_INFO(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') getpeername(0xffffffffffffffff, &(0x7f0000000200)=@rc, &(0x7f0000000100)=0x80) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000800), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet(0x2, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="196a3b9b0e1c1e25c932c5d7ed08d5d8b0d13ead75a624fdeb7be715b857b63ec21eb48b0e79480d93f4959df5f7a4315f0b6bfc6939bf1320dded47bea131b2875cf384514da08f914cd5d2af9b6772f8624549defe399ab04cac51b27b128193cae92da0b455bbc04c65d9f1a3f164fde79e646faa114729d9a57ae01741b73bba506ac1156b7bad91c6b5ae5b03ddbf7175b0b6eda13c005b3661d0156f778a1cc65da278aa6198980d29cfd22a65227c959af39dfd46f7042dac4aba861185d293b868a6769caf5ac30725373daf6cd4c13c2203d429eb6674cc9f1a6a819157658bd095afa25f", 0xe9, r4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000540)) [ 293.625050] binder: 12421:12427 Release 1 refcount change on invalid ref 0 ret -22 [ 293.636172] binder: 12421:12427 unknown command 1 [ 293.642244] binder: 12421:12427 ioctl c0306201 20000580 returned -22 00:36:52 executing program 3: getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000600)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000580)='\x00\x00\x00P\x00\x00\x00\x00e_adj\x00\xc0v\x96Hn\xf1\x94oxY*\xed(p\x1f\"\x9c$\r\xb0\xae\x15\xf0\x1d\xd8?C\xaf\x99\x96W\xd38\xd3#\xd2\xc9\x952\xb87\xb2\x01\xbde\xd8\x91\xe72 \xaa\xceCj\xd7\xb3\x1c\xf0=C\xdf\x9d49U\xe0\xa3\xa5\xd0;d<\xb1\x10\xfa\xba/ms4\\\xf8\x92\x9aH[tF\xea') sendfile(r1, r1, &(0x7f0000000d80), 0x4) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f00000009c0)="cd107049c41d83bab6166770fcc90ba4764e25302d3afdeced948209fd3f6fa64683ca0e46f2e913bf7eceeaca948dd27ae8446e8f6d63dddab7d16dc8f764e36d93040a192f996b6e1c88061b41837b394d8a9e37fe0ce6113ab42d24e24fb42b014a217cb3549b2dcc97033c5cf456fd0ef6f74b6e11699593c33b46843e1e78f0cf11fc85d5c74b00a1017497782aae7d3e6360d5515e4aff4773248275562097897dff6c06b8953fdfa0b1b42f4af92f0edb555f80ae8ffea96a8e", 0xbd}, {&(0x7f0000000640)="62d87ecd507bb80c8e61a26436b75b6baa263ebb20fbc25c8f66cab90b252c2ea2d23c38ecff081648d5baed0d4f1d7d9c29b33969b325c028930b8cabcd1da75c394c4b6b21cfcc12f397f2d5788e86d54b8657353593b5e66ccfa13b487406706e61078a148981ee6dace6313ecf2fc65de23eb5ed6a2547de0b22b9edce01c324c57ed8ee491b4754d14487f0cfb0", 0x331}, {&(0x7f0000000700)="cf23942c21a3a08b88048c0ed71a16cbf15e3f19831c6d270fd2c4286ff6b5f5095607e101b0486c3db9d1c549f9f0fe4a228c97fb6cb1c29d147d63245fb5a640", 0x16}, {&(0x7f0000000780)="70cc8d0181f6d087f5790dd9099edf57da72d52fcb8983a8adbde36f2be196172ff9ce9da70e41a0f26f55cc38a5735d11e89caf84fde3b317abedc48378d838fe32640c3c793bc18c1fa2d754841f797ffa0bed32d5d990c076ac009f5a53915bed25d481556195c2cc2bbad2e5d2321fe8cd3134118fc0c3a63f60335ce48f769dde78e23aec28119567b1cdd3d629d1e748b240ab624460e471e24461c16a463550359080b79d2c2d693b1d16a4141d056d", 0x43}, {&(0x7f0000000940)="ccd822ac472e268ca833f61f8a7de433c00546b23084108751103185263f20c930cee55f06037c6d01bcd7e8eec4a0bf9ee3c95be9f4b7fbaa1dafa2f38747abdda000cb5dc64186", 0x48}], 0x5, 0x38) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x17, 0xa3f, 0x2}, {{0x0, 0x2710}, 0x7, 0x40, 0x2}], 0x30) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x7, 0x8001) pwritev(r1, &(0x7f0000000500)=[{}, {&(0x7f0000000040)="94d54cfca64a", 0x6}, {&(0x7f0000000080)="fc03e4b7ae41a1cbe4f09429a06e5f99adec47d0d59bd6c8304f7b1907d2a0cbe9ea41fac08edf557c918ef17caa48d2bb17daba57d7ae0ce852fffc6981b35d6d6f48f3272c3afc8dc58f6b59c8e23bc68c678aaa8d3d7fb6d55757810448d5254ae814a5a25552bca5faa4c6d116106fec8996436404d2439803df9dbe7559e7b04ffe9fa881591207488472ce1cb91580e62451db6c19f8de5e1744f0892affed4c2a05ba7666c1820c2daf46", 0xae}, {&(0x7f00000001c0)="11bd570a0b39bd1a2385b5a96112f2cb6d91613394a958677d753460e844a5cea2f9cbe809f5dc6e1cb985c15e299e92b5f1c87c539d1e5efd0de69f44ca75e3de5dd0c408b67140624702ebef76a3f8e9e5c1db0edb215752c36a14dd07ad57a4bdfd1c697db56a7241454917ace6d4ff3db798b446f0a57ae8d194b581c7ff3690b7d05caf40e2357cd176b53e72a31aa1ba7c636680b8ef40d7672304dd47b0cc344fc88cf30c9dc05261631f5a4cde8ccfbba0e72efacee49fd56641cb773f09bdcb", 0xc4}, {&(0x7f00000002c0)="83f1046c013e8c0f4f61cb202d39ca4a637361a1223a07f5dbeb233126a158837f40115d707c9d5ad6b6d2486197eb90cdf09b74a2c8021c55e8c0b2bb78766096996a492023f9559c2e6ce3714817f02592b50c10b372990e4722ddd5de7d5322027577f603", 0x66}, {&(0x7f0000000340)="a9b1a571359f8b4886768892cda2f137188db53b3d5940cd947b746cac57a2daeb027803eaea2aab969783510de367dc37ff5697195a49595adafd7c6058bd5d48b71dcadbac6f327fe92994a79320b9d198b16c1255faa32f29bab346bb9c289857c5b42207a6e65f36771bafdff318068b456b83f73ccdb4968b784dd101e02b677a75f09471e4a1c761c0c1fdcc4793af616a9269177d75e7eb7176312bb5b939ca4caafbcbf712e281164a114726291c22f8dc45b39d6370cb22d598756423de4a5e609de5490eac6b2552b763e73e407cd69f16a16525471d79eb9e27663efd655510cb3305903d31", 0xeb}, {&(0x7f0000000140)="684225c4b048751b5a88287252ca850d594a5e46c2855637905b6a86e74612bc4d38d1cd0280de4e976aa69eba781cf8a2de8442", 0x34}, {&(0x7f0000000440)="a31bc2dac12bbad5651bb498420c843ca7044e304c41e463ffaed56e9832eb4171c1c6ce8e3be5c105265f5713a027bfb71b8bec04ab87bd4526d6aa9914050a31b3f7b015c8ff7ebc9e7b86681bcd6b9348092e6222669253d7dcfec7675446a44f8f901fab697ffa28a59d2984e3f2a5fee326e611786da7d1cc844a4816b0820f9265477ba0f33d316146700a27fbebdd0174e3593655bdb461c8e399865f5cfea2de3ad7ee27b3df2530572d13ea54", 0xb1}], 0x8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) r3 = syz_open_procfs(r0, &(0x7f0000000880)='status\x00') ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000d00)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, &(0x7f0000000cc0)='rose0\x00', 0xe0, 0x9, 0x3}) getgroups(0x5, &(0x7f0000000840)=[0xee01, 0xffffffffffffffff, 0xee00, 0x0, 0x0]) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1001000000000000080000000000000001f2ce5bff0000000181b7000000000007000000000000a0b50000000000000000002000000009000000050000000000000007000000de0000c5441b09d0f952d80007000000000000007f0000000000000000000000000000008104040009cc7b000300000006000000fcffffff2011b82f15b74eb2", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="ff500000e50b0000000000000000000000000000020000000000000067000000ffffffff0000005000000000655f61646a00c07696486ef1946f78592aed28701f229c240db0ae15f01dd83f43af999657d338d323d2c99532b837b201bd65d891e73220aace436ad7b31cf03d43df9d343955e0a3a5d03b643cb110faba2f6d73345cf8929a485b7446ea00"], 0x110) 00:36:52 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) close(r0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xffffffffffffff7f, 0x0, 0x1, 0x0, 0x0, [{r0, 0x0, 0x1}]}) fchdir(r0) [ 293.675822] binder: 12444:12446 ioctl 891a 20000100 returned -22 [ 293.683396] binder: 12444:12446 unknown command 1 [ 293.706656] binder: 12444:12446 ioctl c0306201 20000580 returned -22 00:36:52 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x2f, 0x0, 0x0, 0xc9) 00:36:52 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = accept4(r2, &(0x7f0000000200)=@generic, &(0x7f00000002c0)=0x80, 0x800) getsockopt$packet_buf(r3, 0x107, 0x17, &(0x7f00000000c0)=""/19, &(0x7f00000001c0)=0x13) close(r0) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x109000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000300)={0x7fff, {{0xa, 0x4e21, 0x9, @rand_addr="ae2f40fc581bbea40e1345fb1d756245", 0x80000001}}}, 0x88) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000000)={0xc0000004}) 00:36:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) sysinfo(&(0x7f0000000100)=""/198) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0663044000000000003b815bc85d74c8e0cb14bf596136098f4fa2079d57ac1b635b9bef46c2c973abbdb894b7e672527469794720db2700db7f24e3bfe198c144d132ac821e33fca9c77888b29cac584a1df8392000f326f71207ed4f7c9b14c195342f"], 0x0, 0x0, 0x0}) [ 293.717686] mmap: syz-executor.3 (12452) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 00:36:52 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) close(r0) 00:36:52 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) timer_create(0x7, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) clock_gettime(0x3, &(0x7f0000000240)) timer_settime(r0, 0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000200)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6664a8", @ANYRESHEX=r1, @ANYBLOB="2c726f6fd46d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:36:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) pipe2$9p(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 293.780747] binder: 12471:12474 unknown command 1535195904 [ 293.802113] binder: 12471:12474 ioctl c0306201 20000580 returned -22 00:36:52 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f0000000440)) [ 293.829443] binder: 12486:12487 unknown command 1 [ 293.835255] binder: 12486:12487 ioctl c0306201 20000580 returned -22 00:36:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\xa0\xe6\x7f\x98\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed\xa5\x11q\xd0\xbf\xbf\xdd^~O\x1e\xa0\xc3^\x12\xad\x15\xa2t\x8d_\x8e\x0e\x04\xf1\x910\x1cr\x8e<%\xa2\x00\x00\x00\x00\x00\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_pts(r0, 0x7ffffffffffffe) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7fff}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB="08000000000000007f000000000000000700000000000000", @ANYRES32=r2, @ANYBLOB="00000000060000000000000000000000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000080000000000000000000000000000000000000037152d6e40c846df4c173d874c0207308b23b89942f46a47af7ab87f2befb787b8a62e7cd1e5fe7411c384f2bc597e21f5b66b45d602a1336e19420a1b4bfe66e8968171b9621c6aab97144e231f64fb08a41fb42fdfa7276e1b7eed974c6c16b0145bc8209ae952d39ddaeb32ae295ccbaa509961b665e584c2976a294f92c3b3599233fc686079b94b35f2a69936005cd88ec10d74ce166a346029caf13c8dc1dc64f4914f7205e1acbd158ea5d641fefda9621eed7f26f68ae7393cf327f62380f02354124a65c66af915042f8b", @ANYRES32=r1, @ANYBLOB="00000000a20000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000060000000000000000000000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ff0700000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000018000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000ff0100000000000000000000000000000000000000000000"]) 00:36:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="c45a9a071476248d36bf05630440a2b8b528430727bd1d22dd3412d5bc4261bc2296c5c4234ed734fe1e1c363de36d14d7eb96bb8b76ac4f29a0e9a14fcd6be3700767ff7ba10e422ee89916174d123473ab2ffae54d89951686c1ba275208a4a0e0ef00b0c994eae2e759b181548189b7193763e1a70b4b61177c26d155aa60cf93878b4300ee5d7f1e70dda6c89eda3aaa2a86"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:53 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x42) ptrace$setopts(0x4206, r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x9, 0x400032, 0xffffffffffffffff, 0x0) tkill(r1, 0x5) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000080)) 00:36:53 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syslog(0x9, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40402, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@generic={0x1, 0x7, 0x8}) 00:36:53 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/137) r1 = socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="12e976915954c1517ce36ef049dd07b1", 0x10) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r1) 00:36:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="020000050000000050d7bf4b9b486b06d17a029cc5e1ec61eda0611320a0a973022ece73dd0400000000000000b9dd4957ba7a64e885d5313417ad273716ecd330c040c1ff4c28c98a7dfe56f3858e5da5aac191d95b430b89098c26489980144e41e72c75514c"], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x33) 00:36:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) write(r1, &(0x7f0000000100)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba40f359a5958def156c2ac4677afffffffc800000000000200000f8bf54da32", 0x3f) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) 00:36:53 executing program 3: syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000180)={0xbf, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x6ea1617c}, 0x2c) clone(0x210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x313, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:36:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)='lo\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r4, 0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', r5}, 0x30) munlock(&(0x7f0000006000/0x3000)=nil, 0x3000) clone(0x10000a00, &(0x7f0000000880)="8d97ca025b16a3429ce5496861bf2d4cc8f382146fd597e1308ae2f27a91f3a28cb56d9da8e7247cc1b5483dd4487020e466c134ed0a5c3a739d9e7c41132c4c280433", &(0x7f0000000800), &(0x7f0000000900), &(0x7f0000000940)="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") ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000001980)=0x4) tee(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_execute_func(&(0x7f0000000180)="c441996320f0448321526766643e66660fee200f57dec443256d549bf59766460f381e78372e409dc4a1d56c7800660f38329b00000021660fdd29") ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000001a40)={'bond_slave_1\x00', {0x2, 0x4e22, @empty}}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000340)='\xd1?\xf3\xd7v') openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000380)) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x9, 0xe0, 0xd1a9, 0xd41}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000140)) pipe(&(0x7f0000000840)={0xffffffffffffffff}) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000001a00)={0x7, &(0x7f00000019c0)=[{0x1, 0x5}, {0x7, 0x9d}, {0xfffffffffffeffff, 0x9}, {0xf78c, 0x7}, {0x401, 0x252}, {0x100, 0x7c}, {0x7ff, 0x7}]}) setgroups(0x0, &(0x7f0000000280)) prctl$PR_SET_KEEPCAPS(0x8, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) finit_module(r7, &(0x7f0000001a80)='asymmetric\x00', 0x3) request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000480)='user\x00', 0x0) 00:36:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:36:53 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r1, 0x800, 0x6, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:53 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 294.566501] binder: 12509:12516 ioctl c0306201 20000580 returned -22 00:36:53 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x4, &(0x7f0000000080)="e0ab7a4d010000000000060000071a80000001cc", 0xfffffffffffffc57) close(r0) 00:36:53 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) fchownat(r1, &(0x7f0000000100)='./file0\x00', r2, r3, 0x800) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="66649ec2c1b2bc4d59b40fbbe3f61f785a4e0f7d052bb9822f0699516816478f1d3b7b6e3b20ff9dee014c2a0a96b1a2b38de540bcb5a15dd802f97715e9b53d68d2b5874024c4b06439976b5896c304ddd882c40e7bfffa71f756c39cc71f91b81ff9c380c0bbaabb09396257ef150066aeb2d5c6667221ac05cce78746d3ee18483d024506777b06f1c4", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:36:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630461"], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="b0000000000000000600000000000000040000000000000009000000000000000d000000313a00002f6465762f62696e646572230000000006000000000000006e070000000000000d000000070000002f6465762f62696e6465722300000000050000000000000081000000000000000d0000002e002300000000010000000000000002000000000000000d00000053d800006e6f6465766d643573756d6c6f000000"], 0xb0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400001000001"], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 00:36:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt(r0, 0x9, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffe92) 00:36:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) exit(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/231, 0xe7, 0xfc}}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f00000051c0)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x0) sendto(r0, &(0x7f0000000000)="d37e4325756669d9f004eb7f2f04fd53796569afc02fe9675d73c9908ad0a899aa26773bf97f2e90fcd4147deb3cf567cb9b4b20aca8d78ae306cbfba0a40899649c7d73a03f899a0ede0f298c6965af5f89e2071114a953e44030972f4e2f08d89e76a2bc0b588982f550", 0x6b, 0x40000, 0x0, 0x0) [ 294.662838] audit: type=1400 audit(1552437413.567:43): avc: denied { syslog } for pid=12553 comm="syz-executor.1" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 00:36:53 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x9, 0x4) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x34c) shutdown(r0, 0x1) close(r0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_hsr\x00', 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 294.730623] binder: 12567:12570 unknown command 1627677445 [ 294.743641] binder: 12567:12570 ioctl c0306201 200000c0 returned -22 [ 294.760238] binder: 12567:12570 Release 1 refcount change on invalid ref 256 ret -22 [ 294.769032] binder: 12567:12570 unknown command 1 [ 294.774415] binder: 12567:12570 ioctl c0306201 20000580 returned -22 [ 294.782323] binder: 12567:12570 ioctl 6612 0 returned -22 00:36:54 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xaa, 0x4, 0x2, "897ac45eb102a29788161f9564a42454", "67fb5e495601dcbf4462fb3a46031e3ee88c8edc6d2d25f7a8d741659e5bbff8c0daa6e7a947a5b7fcc755fdbd91b094c99307e75a72f0b517efa1a2e90b0ffa78ca2566b8048635f2df8164e2454070b7f2b472ff98ae264db87b620c49ea740dffc5938746a848f4f929cd3de5ffa0a10337bd81b349acd83a73aa032eb4c7149e8bffbf66b4b68bdece7ce6e8b867b272a27bab"}, 0xaa, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:54 executing program 0: r0 = socket(0x11, 0x9, 0x20000) setsockopt(r0, 0x8000000081, 0x1, &(0x7f0000000040)="010000000000060000071a80000001cc", 0x10) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0xb7c) close(r0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x4200, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x200000) 00:36:54 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @rand_addr=0x3}}, 0x0, 0x9, 0x0, "13c2da59a1c7b76383f0d5efdbc52380505bb5a41e3e09d6b91cf75665863e360043dfa944adfd2356d72f0d9817a97c7d8c37686eb6e89276a9a8916ca2e79fca02a7a7bcbce8c4de29fb2141e954b1"}, 0xd8) 00:36:54 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:36:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0663044000008000015c69a7afc651b35828989ac30c88349bdbbb"], 0x0, 0x0, 0x0}) [ 295.417980] binder: 12593:12596 unknown command 1 [ 295.428234] binder: 12593:12596 ioctl c0306201 20000580 returned -22 00:36:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x3) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0xc000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:36:54 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 295.471244] binder: 12610:12611 Release 1 refcount change on invalid ref 8388608 ret -22 [ 295.481203] binder: 12610:12611 unknown command -1486267391 [ 295.488113] binder: 12610:12611 ioctl c0306201 20000580 returned -22 [ 295.521187] binder: 12619:12620 unknown command 1 [ 295.528890] binder: 12619:12620 ioctl c0306201 20000580 returned -22 00:36:54 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x9b, "19d6eb9802180a12e19dcb6b444e6ac6e10acfdc87c4c23784aee67424da77642dc88f5de1d29caaffb1dc31ac87fa5cf476c8fc22236fb68acf4edcd04bdb104a744877b597298584e3fc84f8158e170a94961de183b30f19a4d1731afe90d9c5ed6de5225ed86ddead5e2199a3d320b9fb0c76748fcad97bdc74318f29b2d00a560e434034871675d5eaf976dd2c52a274010198de8770b9db5e"}, &(0x7f00000000c0)=0xbf) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) remap_file_pages(&(0x7f0000916000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffc, 0x0) 00:36:54 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:36:55 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x8000000000000001}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 00:36:55 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15) 00:36:55 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x400000000000, 0x7}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x10006}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) signalfd4(r0, &(0x7f0000000080)={0x3}, 0x8, 0x80800) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) 00:36:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400400000001"], 0x0, 0x0, 0x0}) [ 296.254498] binder: 12643:12649 ioctl 8912 400200 returned -22 [ 296.267060] binder: 12643:12649 unknown command 1 [ 296.274453] binder: 12643:12649 ioctl c0306201 20000580 returned -22 [ 296.294478] binder: 12643:12661 ioctl 8912 400200 returned -22 [ 296.357614] keychord: using input dev AT Translated Set 2 keyboard for fevent 00:36:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r7, 0x9c22b7bed4b13083, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40004) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x2000, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xd000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x501}}, {@allow_other='allow_other'}], [{@obj_role={'obj_role', 0x3d, 'mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r4) 00:37:55 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') r3 = fcntl$dupfd(r0, 0x9f2f8cc4be659165, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f74ed6f64653d30303030303030303030303030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c0400", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) r4 = getpgid(0x0) ptrace$getregs(0xe, r4, 0x1ff, &(0x7f0000000a00)=""/154) write$P9_RREADDIR(r1, &(0x7f0000000ac0)={0xf3, 0x29, 0x2, {0x3ff, [{{0x4, 0x4, 0x4}, 0x80, 0x8000000000, 0x7, './file0'}, {{0x80, 0x3, 0x7}, 0x7fff, 0x0, 0xd, './file0/file0'}, {{0x8, 0x3, 0x6}, 0x6, 0x7fff, 0x7, './file0'}, {{0x80, 0x4, 0x8}, 0x7, 0x3, 0x7, './file0'}, {{0x18, 0x0, 0x5}, 0x80, 0x0, 0x7, './file0'}, {{0x20, 0x2, 0x7}, 0x8000, 0x401, 0x10, './file0/../file0'}, {{0x4, 0x4, 0x2}, 0x4, 0x100000001, 0x7, './file0'}]}}, 0xf3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x804, 0x4) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x490, 0x190, 0x300, 0x300, 0x190, 0x300, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@limit={0x48, 'limit\x00', 0x0, {0x0, 0x9, 0xc01, 0x1, 0x9, 0x8}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x101, 0xc, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x5, 0x6, [0x16, 0x23, 0x28, 0x24, 0x25, 0x20, 0x6, 0x1e, 0x25, 0x32, 0xb, 0x3d, 0x2, 0x38, 0x3e, 0x37], 0x2, 0x0, 0x10}}}, {{@ip={@local, @multicast2, 0xffffff00, 0xffffffff, 'bridge_slave_0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x7f, 0x2, 0x8}, 0x0, 0x110, 0x170, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x0, 0x0, 0x50}}, @common=@inet=@set3={0x50, 'set\x00', 0x3, {{0x2, 0x3f, 0x200}, {0x80000, 0x2}, {0x4, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x9, 0x10, [0x17, 0x2c, 0x38, 0x38, 0x2, 0x0, 0x2d, 0x34, 0x1d, 0x1e, 0x35, 0x21, 0x6, 0x1b, 0x23, 0x11], 0x0, 0x1ff, 0x8}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x5, 0xe, [0xf, 0xe, 0x29, 0x35, 0x5, 0x1e, 0xd, 0x1d, 0x39, 0x24, 0x36, 0x37, 0x29, 0x12, 0x12, 0x5], 0x2, 0x200, 0x4}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000280)={0x3f, @broadcast, 0x4e20, 0x2, 'none\x00', 0x4, 0x6, 0x13}, 0x2c) 00:37:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:37:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c9b4202b"], 0x0, 0x0, 0x0}) getsockname(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000200)=0x80) accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) r3 = dup2(r1, r0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 00:38:12 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) close(r0) [ 373.714338] binder: 13559:13561 Release 1 refcount change on invalid ref 0 ret -22 [ 373.736585] binder: 13559:13561 unknown command 1 [ 373.748615] binder: 13559:13561 ioctl c0306201 20000580 returned -22 [ 373.796960] binder: 13572:13580 unknown command 723563721 [ 373.802841] binder: 13572:13580 ioctl c0306201 200000c0 returned -22 [ 373.824644] binder: 13572:13580 Release 1 refcount change on invalid ref 0 ret -22 [ 373.840270] binder: 13572:13580 unknown command 1 00:38:12 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0xffffffffffff83ee, &(0x7f0000000000)="010000000000060000071a80000001cc", 0x10) close(r0) 00:38:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='.\x00', 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 373.846624] binder: 13572:13580 ioctl c0306201 20000580 returned -22 [ 373.926405] binder: 13604:13608 unknown command 1 00:38:12 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) 00:38:12 executing program 0: r0 = socket(0x10, 0x3, 0x4) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:38:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) [ 373.953426] binder: 13604:13608 ioctl c0306201 20000580 returned -22 [ 373.971940] FAT-fs (loop5): bogus number of reserved sectors [ 373.971946] FAT-fs (loop5): Can't find a valid FAT filesystem 00:38:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x6, 0x70, 0x9, 0x2e2, 0x40, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x9, 0x7fff, 0x2, 0x8, 0x9, 0x62, 0x2, 0x2, 0xfffffffffffffff9, 0x80000000, 0x5, 0x6, 0x75, 0x6, 0x2, 0xcf53, 0x1, 0x1, 0xb9, 0x1000000010, 0x3, 0x7f, 0x1ff, 0x9, 0x0, 0xfffffffffffff850, 0x8, 0x9, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x2208, 0x6, 0x1, 0x1, 0xe32f, 0x1, 0x8}, r1, 0xe, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000280)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0x240, 0x0, 0x0) 00:38:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$TCSBRKP(r2, 0x5425, 0x5) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:14 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r1) 00:38:14 executing program 5: clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x26) ptrace$cont(0x18, r0, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x0, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:38:14 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) unlink(&(0x7f0000000000)='./file0\x00') 00:38:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000000000001"], 0x0, 0x0, 0x0}) 00:38:14 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:14 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x5, {0x3}}, 0x18) syz_extract_tcp_res(&(0x7f0000000040), 0x40, 0x6751) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:14 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) 00:38:14 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0x80000000, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 00:38:14 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) 00:38:14 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200, 0x0) init_module(&(0x7f0000000040)='selinux*&\x00', 0xa, &(0x7f0000000100)='fuseblk\x00') [ 375.738498] binder: 13684:13689 unknown command 3 [ 375.748613] binder: 13684:13689 ioctl c0306201 20000580 returned -22 00:38:15 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) syz_open_procfs(r2, 0x0) 00:38:15 executing program 0: r0 = socket(0x11, 0x0, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x9, 0x4080) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000b97ea404da0900000000b1000000696c31a4ec9916722e8d6d4774b35e9ce4c407dab7852d047eaae6d864c2c5593e6f4012e07fb09c340b5bf7f00d6d708c9016bf9d2b7ca19599e6edce98625c1d9c344aabd7f1978407f97f1578495ba71d1ef6fe8e21ea4b5fd424492aaff3ebc6cfddfce482cbc0ffa583523add18803f599062f8a5d504b61bf7889954c1aecf991d98267dae67a5b1864e2df8177505ddc55d3e43308d892e00000000000000000000000000000000"], &(0x7f0000000100)=0xd5) 00:38:15 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c2259c50085726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f028d3d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x901, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000001c0)='./file0\x00', r3, r4) sendto$packet(r2, &(0x7f0000000040)="74b6c9fd890b5e763232", 0xa, 0x0, 0x0, 0x0) 00:38:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x20, &(0x7f0000000100)=[@fda={0x66646185, 0x6, 0x1, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f0000000040), 0x1, 0x4, 0x2f}], &(0x7f0000000180)=[0x30, 0x48, 0x28, 0x48]}, 0xa2ac}}, @decrefs={0x40046307, 0x3}], 0xb1, 0x0, &(0x7f0000000240)="c1154c7a5a17ad942f46de69ba0b7414eb96a80cae63d0b348b512b1754329c4d905340d75e8e905b3948f2b372ebbe874da890a846307c5828582a69e5a729f8b94e2455afecbb4d367db3812e1c2bae2761580da303b1cedddfc1605c092fa4efc212dc113f2bdb4fc031a1fda947c0c3e0a90c94c862daf28c10aa7128a5afbfa4cb638a2072f316019ae23e00766122c9a8bf8b560f52c3adef8d6f60b3d23054e2cca804aeaf9ce88f776e3c1d142"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:15 executing program 3: r0 = dup(0xffffffffffffff9c) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@loopback, @dev}, &(0x7f00000000c0)=0x8) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0xc460, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) setuid(r2) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'rose0\x00', {0x2, 0x4e23, @multicast1}}) 00:38:15 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) close(r0) 00:38:15 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0xfffffffffffffffd, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x141045, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x82, "c356e4565e63da20bf69f02260fbd9169176831d1c1b6710d353e033548c237fbd707ecb74f906a3f9358dca2a7ee77b95cadc93154b3d3b865bc4f8b9de2b31748fd0a931c9f805e8ae88c95e53a32ea73701beb891bfc11bb454c849ab9cfc4fcd322e4172b89a03aca177b7b6b9ae48be9454e673ddad281d432b5a50c26ca831"}, &(0x7f0000000180)=0xa6) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x1, 0x4c, 0x10001}) open(0x0, 0x0, 0x0) [ 376.469684] binder: 13937:13940 got reply transaction with no transaction stack [ 376.495045] binder: 13937:13940 transaction failed 29201/-71, size 72-32 line 2921 00:38:15 executing program 1: mknod$loop(&(0x7f0000000240)='./file0\x00', 0x10000000000000, 0x1) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x4, @local}, 0x1c) r2 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@ipv4={[], [], @local}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000940)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000a80)=0xe8) mount$fuseblk(&(0x7f0000000540)='/dev/loop0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f00000006c0)='fuseblk\x00', 0x110000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',max_read=0x0000000000000400,euid>', @ANYRESDEC=r3, @ANYBLOB="2c6d6561737572652c6673757569643d37373237377236632d623e7f312d77007e722d006763382d38353965000035752c6f626a5f726f6c653d2f6465762f6c6f6f7030002c646f6e745f61707072616973652c726f6f74636f6e746578743d726f6f742c7063723d30303030303030303030303030303030303031342c666f776e65723e", @ANYRESDEC=r4, @ANYBLOB="2c646566636f6e7465f8743d726f6f742c00"]) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000040)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x8084, &(0x7f0000000dc0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000340)=""/26) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="6664396afee9090000000000006e417a475377398957f4a5bba2224336b05a5f95b9e63678d11931d0080076e4e602450bc8dde89ac3cc31d0c32ae7a0099fe487f0f4ccbcab42434636613cf62a3cbe9205a5905dc5e6ace16d079100000000000000000000000000", @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030313030303030d4757365725f79643d3d7c5f31ed515dee38e1a7d001842f5618b5c2ae718f078b9d7d0d4e99d64a2f8798b1fdcfbaff5dea90328e4d96f7218dad2d1302b30bec65e56e17b3d00a48929f815d3e8e8866b7e4323adeb5627bc5593385e1fb83d8", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') mkdir(&(0x7f0000000c40)='./file0\x00', 0x20) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xffffffffffffff03, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="05022d06000000000000000100b7"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f00000003c0)) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x8c, r7, 0xe00, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x1) sync() [ 376.515423] binder: 13937:13953 unknown command 1 [ 376.515431] binder: 13937:13953 ioctl c0306201 20000580 returned -22 00:38:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:15 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) accept$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={r1, @empty, @remote}, 0xc) [ 376.599714] binder: 13964:13965 unknown command 1 00:38:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x100, 0x2fc4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 376.623134] binder: 13964:13965 ioctl c0306201 20000580 returned -22 [ 376.685506] binder: 13973:13975 ioctl 8940 20000040 returned -22 [ 376.721129] binder: 13973:13975 unknown command 1 [ 376.742420] binder: 13973:13975 ioctl c0306201 20000580 returned -22 00:38:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) syz_open_procfs(r2, 0x0) 00:38:16 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f6924f1", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) unlink(&(0x7f00000002c0)='.\x00') chroot(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000004c0)=""/75, &(0x7f0000000080)=0x4b) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000340)={0x400, 0x1, 0x3, 0xed36, 0x8, 0x9}) getsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f00000001c0)=""/247, &(0x7f0000000040)=0xf7) 00:38:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 00:38:16 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team0\x00', r1}) close(r0) [ 377.410128] binder: 13994:13997 unknown command 1 [ 377.420829] binder: 13994:13997 ioctl c0306201 20000580 returned -22 [ 377.426713] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize 00:38:16 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:38:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x7) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1, 0x0) 00:38:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/230) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 377.446706] EXT4-fs warning (device sda1): ext4_group_add:1605: No reserved GDT blocks, can't resize [ 377.464958] binder: 13994:14007 ioctl 6609 0 returned -22 00:38:16 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xca) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x8, 0xb4, 0x3, 0x800}) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:16 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='veth0\x00', 0x6, 0x1) 00:38:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) capget(&(0x7f0000000100)={0x20071026, r4}, &(0x7f0000000140)={0x3ff, 0x6d8c, 0x0, 0x8001, 0x5, 0x9}) [ 377.502643] binder: 14013:14015 ioctl 4b4a 20000100 returned -22 [ 377.515299] binder: 14013:14015 unknown command 1 [ 377.530501] binder: 14013:14015 ioctl c0306201 20000580 returned -22 00:38:16 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='+group_id=1', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r2 = getegid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x2028880, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'fuseblk\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/loop0\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/loop0\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) [ 377.566026] binder: 14032:14033 unknown command 1 [ 377.571364] binder: 14032:14033 ioctl c0306201 20000580 returned -22 [ 377.583435] binder: 14032:14033 ioctl 5429 20000040 returned -22 [ 377.604071] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 00:38:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/14, 0x34c}], 0x1) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x8, &(0x7f000027b000/0x3000)=nil) io_setup(0x0, 0x0) 00:38:17 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x181000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r2) 00:38:17 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="e069b10ee5d38a8059b8355f534227ec9a77787c2331ea0762aad0ab84ea689975b32515b4a33976fb12fb1dcab83175b9f527", 0x33, 0xfffffffffffffff8) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000004c0)=0x1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r1, 0x4, 0x13e7}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'sha3-384-ce\x00'}}, &(0x7f0000000500)="1deaa86381e3", &(0x7f0000000340)="142e04f58bc1133501f37a29fcca77d921d7f26e6294b661d3b773b73dd49279edd7470c1453d47814ef0a87579ba7f8bc82d3044e41db2635c232bcbf1e70cd869eb087088dec6796a07679d1c673b4178d12acbebb9c81236259cc9adf78aea65dda61f18cbaa353f3f31d5f004a2cf89d96ccabd34d5b2333a47fcaf9da771384a12fa68fb16a5e0ccfc025e3a9fdacf8f5e3ce2170f495fcd356c28229a65c708be0392a3b1919950074a7a78ead0f4306be755c7ac167e5b3554847565f16ca1aa52251d6076a415021e94b78fe18e94e05156e0332b9272dd3d85c248254553a26b8944e7c599688a9abc080d819c6f4") mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2041000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d8, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff25d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x735e3b3c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb4a}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0663044000000000017d02dc1ec226e0feaf98359bd8cfc2235cd6c30a166c08e89cd5dfeec0ab566a01b5ecd421826892678d78d53e32b753cb7ae5f9cd17dad389134f3efc58be7aac63e4f14088e585ed318e201d9e1639b7999d440e45f5dd93dc707eb8e2"], 0x0, 0x0, 0x0}) 00:38:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140c000047000100008df065593fcb1be3d9915c50da602aebc89bc5fc5f33d2980cdec1351fc479c70895572dd5d54fc106c3ed57be4453e4603e5395f9d088b68c17e957035071ef2ae6463286bb51d0"], 0x14}}, 0x0) 00:38:17 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="d9cf930234518f941cdc123e02f62c00"]) 00:38:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x202b}) fsetxattr$security_selinux(r2, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x3) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2) read$eventfd(r3, &(0x7f0000000140), 0x8) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2836000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 00:38:17 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 00:38:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '&GPLcgroupproc&'}, {0x20, '/#\\/procbdev'}, {0x20, 'ppp1'}, {0x20, 'trusted%'}], 0xa, "296a9f31070cf523d800678dbdceeafa035548900e82f3e267dc74731b6d5bf229de41a0e30d9e3bbb945cadd670be14d37d5d"}, 0x69) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 378.254312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pig=14055 comm=syz-executor.3 [ 378.268919] binder: 14054:14057 unknown command -603816703 [ 378.268927] binder: 14054:14057 ioctl c0306201 20000580 returned -22 00:38:17 executing program 0: r0 = socket(0x10, 0x40080002, 0x2000000001) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@v1={0x2, 'm6'}, 0x3, 0x2) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='veth0\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/85, 0x55}, {&(0x7f0000000080)=""/147, 0x93}], 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000000060000071a80000001cc", 0x10) close(r0) 00:38:17 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [{}, {}, {0x20, 'bdevmime_type[bdevppp1vmnet1'}, {0x20, 'user_id'}, {0x20, 'group_id'}, {0x20, 'group_id'}, {0x20, 'fuseblk\x00'}], 0xa, "6c244f3e9e4f6e16ea55da05fe295b0264d1c98221d55ebed3ff1e0d797bcdc09f5ae9bf17830f78dae8fac7f844b7820316d6ec9e9d72e24d5a6be9f1ee359ea13c3cb697fda063755f426056032efe97b1ea1a1d73fb74233c06c5c6d40a3d64ba4b23e8e6dd64315f844375b98d4bcc97fc06e0a763571399f1dfe3bcebe534b7cc0ba66da9aa10e2093599ff1f21adb36213fb3c52dfc0191f4c"}, 0xe9) connect(r1, &(0x7f0000000000)=@generic={0x3, "3786f0030e4f556cef8cea5270f0a040795bc210a56b38afa6d43f95a39d0796b52201fb0ded36a0220c5f5a01a7ac9888813739904d88873a51ae6c619190a11b464dc2cee16a35c2b6e454f4068fb2f9e282e35b909d5fdc8d644758bc438552e697b106983adb0c9bbae5a631badfb7355cc483c08c9a5c6eaa4a6086"}, 0x80) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 378.325220] binder: 14072:14075 unknown command 1 [ 378.334577] binder: 14072:14075 ioctl c0306201 20000580 returned -22 00:38:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x80) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r2) fchmodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r3 = fcntl$dupfd(r1, 0x406, r0) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x7fffffff, 0x5, &(0x7f0000001500)=[{&(0x7f0000000280)="b831184e8146a21dcd207b47cdd1bacb1f3729b3db0d3db6d030189c04b40a5764fe07294032c156cf8ff03755e683a1e2343e4bfceb53608146cbc5e228c78eceb47d4977c2d85c8f7afb75f745b00074a9299fdf60424ca5ee552d058049", 0x5f, 0x7}, {&(0x7f0000000300)="93b54916837a03f83f71f9", 0xb, 0x4}, {&(0x7f0000000340)="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", 0x1000, 0x5}, {&(0x7f0000001340)="b7f7b2332680935aab3f5bb507ad391957fd7c1e1d2f9c7bc04d2117643755b5cd067378a5f76719cab73da3069b7b8266199d117ea64f13d3bca66986de063b758cdbdf769e511df1ad97558ef5dd4797c3d12017b75e0779e7ff4b069b79750f4cf12fd8eb8af3057a5e05415cccdef07d0aff799b1b515c844ae60aea3c05085f72794f3047299c417d51220e3d213b5a112e710dff0aaff0fa87660075559b7891f39c4e8f51163e1c7fd4b0b4e8b66110a6f6011a0c783e39b17aa6237521f3f07ef96a8b773d6f4374287bd33383f4", 0xd2, 0x8}, {&(0x7f0000001440)="f0d90173da29a4e907a6489ac258b9abb5289ebe3fb2ff9064ee92ff46c782eb2db479f75cab21597bef50046a8708e5b5eeec21c4d38d4e0d4ad25aeb6c162fc2c2bb0bd58c802b9e35949384b164c0e68a9490ac87c95217847157769826dc52e6040fa3f33f36eab6c9f0d68b7753bfe362ce85e34391ce7ebf5880b64033126d7e655652", 0x86}], 0x20000, &(0x7f00000017c0)={[{@fat=@uid={'uid', 0x3d, r4}}, {@fat=@errors_remount='errors=remount-ro'}, {@fat=@tz_utc='tz=UTC'}], [{@uid_lt={'uid<', r5}}, {@fowner_gt={'fowner>', r7}}, {@obj_type={'obj_type', 0x3d, 'cgroup\'@'}}, {@subj_role={'subj_role', 0x3d, ']'}}, {@fsname={'fsname', 0x3d, '$securityN,system(^'}}]}) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000001880)) ioctl$RTC_VL_CLR(r0, 0x7014) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f00000018c0)='$securityN,system(^', r0}, 0x10) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r9 = open(&(0x7f0000001940)='./file1\x00', 0x20000, 0x150) r10 = accept$packet(r1, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000019c0)=0x14) r12 = getpgid(0x0) syz_open_procfs(r12, &(0x7f0000001a00)='net/sockstat6\x00') getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000001a40), &(0x7f0000001a80)=0xc) r13 = creat(&(0x7f0000001ac0)='./file0\x00', 0x8) pipe(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003680)={0x0}, &(0x7f00000036c0)=0xc) sendmsg$netlink(r0, &(0x7f00000037c0)={&(0x7f0000001b40)=@kern={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000003600)=[{&(0x7f0000001b80)={0x10dc, 0x3c, 0x0, 0x70bd29, 0x25dfdbfe, "", [@generic, @generic="3d3d6b4d7aac9eb9b5fc0ecacec9d61a81f985555838ef0d178bd7fe5ce880b6", @nested={0x10ac, 0x5f, [@generic="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", @generic="8646a586a3b4a27ae58dc8f5bff5c7cc13b47be794a42ada9faa60", @typed={0x14, 0x14, @str=':,,selfselfem1@\x00'}, @generic="2798c99f704c062ab3d84ef02b02e6e01644ca14031129403fd21e27d1cc24eb342072e85f654d588badba487fb0b432fef8edbc022066f7c1663f0aa8546e3cffd372406bee6302ed04a78473208a67e0236274e9d2ff6c52da747b6219c9ff7ad09fda11f0ad36a3f3f42141378ee1897cf8cdd225"]}]}, 0x10dc}, {&(0x7f0000002c80)={0xd8, 0x1d, 0x0, 0x70bd29, 0x25dfdbfd, "", [@typed={0xc, 0x4c, @str='cgroup\'@'}, @generic="dd5af1db944fdf6a70b55d6d432fd45a83c00e9070335c51b03355f09945ca8121c0976eadd4c37bc82fbead7836bc33803e1b959761b5ec5b1c0fc696d84c135b57c46a1ed3c6a5ae08224f5a4aded6b30cb4055a63051ab1d847d74220fbfe3d57a77200c32e6f2c9df242132246db826e1a0fb93eb41748cd244d2e3625faec6b57678d64214addb071eceeda0b25a73d70d87b8e33abe040357823da203a603d6c6464", @generic="0f483f0b2da3e283e1b1e60ea902f977909b13d5"]}, 0xd8}, {&(0x7f0000002d80)={0x1f8, 0x29, 0x20, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x81, @ipv4=@remote}, @nested={0xfc, 0x8f, [@generic="1320befec209b345341bc2f6b82a460c9e2bb7ed00f5fb8d9580fde1827c493330476d53474f7896b43bdd779978be19b9c4c17d748dcdb037e662d797f45b73a9b7652ecd8e7f88d7702360bd88eacce1eab94c745a161786eb5b48644dd73635e25c9397e57288d41d2c6dfaeeefcfffd656e9a567e2028dabfeee72ece6a4ebdb8063b65ab97988b8a8ea9024e9ff9d8233730d0f993702a91db99e1645f612ee181aa5e1d2476c8840448cdc82eb6ee05e052801eaca2c02b502ecc3ffbaf526772dfcc3233423c91a091bab51575aaf2dad50de8c3fd7f1fa900c7da16650453488ce65be52277eb441b514093a8ad426c0b5231cea"]}, @nested={0xb0, 0x81, [@generic="9718b3de62963dd7c3ef560a13e77623ac03698d2766bf82a3191a9e30df9e980ac774705ea75f8077b221565a23dd7e11473b70bace421c67f49245913ff987ed53677388f082d9ed072364ff12e119dbc39c857c9c83ef8d9ba6b820e5fe1701731137b6b81e9139a256296b85144dcd48f552b6b7a978af2d097f5f035c27071cfb577c48572c1fae095a9478af564893750831af45ec2929abba8161526e8f8f1cd62f104ebc791063"]}, @typed={0x4, 0xb}, @typed={0x8, 0x74, @fd=r1}, @generic="00f25a9436007e2496a3caee0536576aa49c7836ba0a950ec7757a742cba76fcebe7fb63e52fca"]}, 0x1f8}, {&(0x7f0000002f80)={0x34, 0x15, 0x200, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x66, @fd=r9}, @typed={0x1c, 0x8b, @str='ppp0vboxnet1)wlan0lo\\\x00'}]}, 0x34}, {&(0x7f0000002fc0)={0x4e4, 0x25, 0x0, 0x70bd27, 0x25dfdbfe, "", [@generic="dbe476e1ba975f7aa7b7e2b3574b9deb18f66f9ecd37b50014b5ec8a59b3f367941dc18b06f194211228ec233823c4da9b95eaab8f62ab2fc414097c034bdedd24d712fddfa1d3a6a9b213789b6b1b9ee2e9a6345d1b6c9621c7e899b647266b2bac9650054bbeb959e33f10e0b3a55da076c17266d8e91572de403821dbfe884cfe83678dee005434c16135578dc982d48513ac2e6394b68afe415af71de38c35f30b87be356d772f3701115b6527c3a807ebb5c8427983b110bbb2cb2fe373d17e028de2d52082dc64c62dbe63438e3e92d45616893c7193b3d1e2a9ff58b0", @nested={0x198, 0x84, [@typed={0x8, 0x6a, @fd=r10}, @generic="2660f0acc4b0a06e4080fb778c13c2c303ef437ce445719d47791a0294c2561392f6e4a7b38d66ce452cb82db2350c46ad363104aed08d7c59490efb15a56d7d6232abb22d0308729b113c9836e779098fe565b9a1c05c8e9a639160424f6a335e9a831c12f3215dec7cada53977f0531fcb94f4b420ff4c07afc46de763629e133cdaad7a9cce3dbbbe0508c47b39d5b1d132471bc106b517d3da2a7d", @generic="97aafb5911f15b43bc7d200dc7ee80a623d0b0aab0fe243919099462c87019de60d06036a118e018a0f0426bde4546bb30efc6873dc08338e44d79bdfa121ed0c2cd2bb908b2be8fcd1375246df69801ad1b8f6ae9a9960dc72ceb3874d12327918d32541a86a6415fce98aa8b59e8fc0a6c36ac8b1c6fac75b940b4ec627776d9e4ddf7c4fb830adf28005032101b1037ba90c348fb5d31f6f922d9c63f7be96e061c18e960bcd5efa81eae4addf10dc378dea8743aac4b9650aef950e603f1295fc5419d17a11725f9dd39182402c27ffb859c128192ee95a27cc15b2501490712", @typed={0xc, 0x18, @str='msdos\x00'}]}, @nested={0x25c, 0x75, [@generic="c91ccef83c208fae561e2dbee656eb7983dc9059174eb249de42b725b85e281441d4af8737ee4a3cdb57464e2985d7c3ee460880f991062d01ad628a47f18906b54a1f7e68972f781286c1281127e5a1ae7e5b48765d8c4fff3e1b5eecf361caff22af51901e90a8c55df530544235a41b6f75e27f8db851da5b063b6e83d95249ba460cb42ceedf072a8eaa5282953b1d19b28f36da1c721c8999529a941b9a930304f3c5108f6bf908a8955679d2efcd1069074b9bbc20b722eafc0aa84e777fc13e7b186db324a25815a9eccc91c83b0d13a907e16ddcaa860fb5e99040fb72fb6e3794b864a238297950d8", @typed={0x8, 0x3e, @ipv4=@rand_addr=0x827}, @generic="e67c0351e9ce6e8a44794bd7e36fddfe24b196d78721864950167bbc5949e84cbbd347c4b7b1d2ce5bd2641511340cce4db8c503a702823ef1fb569356d94945aa52a8a793366cb3a79d7ca04505f691ca3183f42f39c97793d38c763fe4020f1e8efa3edf2159e561f09a5f1b6a136e91eea3557460cf3b59c3812e495ed7986c8c8953434fedeef2f23c1fdb5ec645308f01023da4f2", @generic="adc68f9ffb52352f3883520405d57ace48281fad0940078a9c05a0e09ff954a39eb65d82650a639f339198d9cd103a3dc82c5cd840f802d9a93b8684a45fb0bfc7c21ea50d46b49e848a82ebbf65a1a60a19941291902e82177f6e4f4927eb3387aa46d23e27966f7251dbb69d50ff42b674e2ad6dfbe2c46d101461ac16fe7f25976e341ed74f0ab58801e7e7c8e667b793e252272164e0d60944b2366ee1dd6553aab4b1cd2973ba0e0ab935ac4f67a75bd1f2aa20da7ed844696b4de3f50ce5da40acf3bfae98", @typed={0x4, 0x51}]}]}, 0x4e4}, {&(0x7f00000034c0)={0x134, 0x1b, 0x200, 0x70bd28, 0x25dfdbfd, "", [@generic="b42121c5de740c82e4497dee9b557d831064647b8f4f0e69996c1c04fcdef0beee7440a9d19178aee1df530514962d351b80770962b6db2c24318965574ad3f2f89226817ad882b21e502aa86c417936af352a8ab349e55e687463ab8a3e691944b4e02a5f672dbb659f5ddbee3bf8a5adb0ac24933276dc90feba433094c9dd2418c20b37ff77beed97d65473ea3fc01d3125edbc2140867ec8864e6f14291263fffc5ae463b4bc696ec3", @nested={0x14, 0x96, [@typed={0x8, 0x5f, @fd=r14}, @typed={0x8, 0x73, @pid=r12}]}, @typed={0x8, 0x3e, @uid=r5}, @typed={0x4, 0x71}, @generic="32749ec35f60c50a8d2e2787ca13cb0d07431dddc6fd8ea7e8336884fd66cc18871ba0b951fc258c18f6c38806f62fac13433da363e4b0d8895530a3f0835f38ccd057d03bc5b5f6aef5499f2eef09f7060c508df46ce229d8", @generic]}, 0x134}], 0x6, &(0x7f0000003700)=[@cred={0x20, 0x1, 0x2, r15, r7, r6}, @rights={0x20, 0x1, 0x1, [r9, r13, r8]}, @rights={0x20, 0x1, 0x1, [r13, r10, r9, r14]}, @rights={0x28, 0x1, 0x1, [r0, r3, r13, r0, r14, r14]}, @rights={0x20, 0x1, 0x1, [r9, r1, r9]}], 0xa8, 0x8081}, 0x40000) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000003800), &(0x7f0000003840)=0x8) setsockopt$inet_icmp_ICMP_FILTER(r14, 0x1, 0x1, &(0x7f0000003880)={0x1}, 0x4) connect$packet(r10, &(0x7f00000038c0)={0x11, 0xf7, r11, 0x1, 0xffff, 0x6, @remote}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000003900)) 00:38:17 executing program 3: clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x0) tkill(r0, 0x2e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000040)}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000004, 0x9c}) r1 = request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0x8, 0x2ad3, r2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x600402, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x44, 0x2, 0x0, 0x4, 0xffff, 0xffffffffffffb0a9}, &(0x7f0000000140)=0x20) 00:38:17 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@empty, @multicast2, @remote}, 0xc) setxattr$security_selinux(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64MMAP\x00', &(0x7f0000000240)='{user\x00', 0x6, 0x1) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303064ec0af8c088a34a303030303030303130303030302c757865725f696401", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="003e0658b3e217aeb0f5ed8d0e9bb79c685865f06b490903e3832f38a926a7a32ad4f9f9b7b35cf6d563484805aa40efa3d66cb0a59658549d371d9b477c9100d0a8b959a25d5b676ebf76675ea2d0ff7f3599b8da54feac32fd361aff7534b647c462b995044da927dfd5fffc5e7ace7da184c329dafba63e5b8cd697dbde1462af24d762a41ca70ffe58fced986d2083f2299384b31342b7f6e4d5b06fcebb83af57260ba5185d7ce0396a37bdcc6acd991b9945b3e27126296771b421b37a2103c1e549ed814fd3790d31de874676c932bfcfc3400b355015badc5f75a306ce136b98ef52d7f9404f6884f6389b"]) 00:38:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100, 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100000000000032, r1, 0xfffffffffffffffc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='\x00\x16\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='\x00\x16\x00\x00\x00\x00\x00\x00') getdents64(r3, &(0x7f0000000df0)=""/528, 0x13e5940b) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 00:38:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440000000ffff9c92b6b71964b87c358b4801"], 0x0, 0x0, 0x0}) 00:38:17 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x3, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000)="e0d00ca7a1cc09f5c14fc12b2873fb422bc1cced3016b019022eddaf83a77d52012defbe6a83274eb5651ca554646190c7fc3277bd2623701d9b835f9bbd30244e455c12ceadc9abf94ff58e6ffd41ef995d0a6fcc6eee75c6f509e72e8b44c0c0868459f8", 0x65, 0x20000080, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f00000003c0), 0x4f9367731585858c, 0x0, 0x0, 0x0) shutdown(r1, 0x400000000000001) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x80000001}]}) 00:38:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:17 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) 00:38:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f000047efe8)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) [ 378.996091] binder: 14101:14106 Release 1 refcount change on invalid ref -16777216 ret -22 [ 379.012947] binder: 14101:14106 unknown command -1231905537 [ 379.019453] binder: 14101:14106 ioctl c0306201 20000580 returned -22 00:38:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002580), 0xfffffffffffffeb0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000013) 00:38:18 executing program 1: setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000700)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "b0acb52ae0ba668e"}, 0x9, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = getuid() r3 = getgid() mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='fuseblk\x00', 0x200008a, &(0x7f0000000940)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1ff}}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1600}}], [{@pcr={'pcr', 0x3d, 0x28}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'fuseblk\x00'}}]}}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x2, 0x1, {0xa, 0x4e22, 0x1ff, @local, 0x206}}}, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2f0}, 0x800) read$eventfd(r4, &(0x7f00000006c0), 0x8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0', [{0x20, 'em0bdevppp0{'}, {0x20, 'fuseblk\x00'}, {0x20, 'security.ima\x00'}, {0x20, '!eth0'}, {0x20, '/dev/fuse\x00'}, {}, {}], 0xa, "f9110d5e626886475a5e801e35ebe34d3930a5b846ed4acdb5f374bfdbb83a58fc551bd68eb1e68f64b25b97f8c5041cb63dc1714afbd6d3d251b9db2c2e545d4cc0cfa88eba03bc99bc5ecbbab29bb42a87c0bd9b2eaf9c3c593ea63a923a92989806499e7cd682bb9aee36bbbd77cadc270dc3a6c114812031b1baabac263094ed308a68d9bb76f1ebc9f320ad62d26ae1560f145c7b47b716e50f9bca6ae4d91e9e6d85530f8ab1f6877ab5a7c0e2a311378d961f9ea7cd45fa21f8123363eb80b9bd376b0f027871e88e708e"}, 0x110) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmo@\x00\x00\x00\x00\x00\x00\x0000,user_id=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00de521de9d594ac2a9721e48608400082394a9948a20f03"]) 00:38:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) close(r0) r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/snd/timer\x00', 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='rxrpc\x00', 0x0) [ 379.111679] binder: 14126:14134 unknown command 1 [ 379.122887] binder: 14126:14134 ioctl c0306201 20000580 returned -22 00:38:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x100000001, 0x200, 0x7, 0x4, 0x3, 0x8, 0xfffffffffffffffb, 0x769, 0x9b7e, 0xfffffffffffffffa, 0x8, 0x7}) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB='sb=']) 00:38:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, r0) r2 = getuid() stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x800, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@appraise_type='appraise_type=imasig'}]}}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05630440a51d4a0366ab0eadbea0bffee07ceae5d1332374efcb59e31cc7d220cfe62d79535555803cfbaf460548c4e920d208c4d8f9ebf64d0578edbfb7f4a793711fe772710bda062af230adceb6177939ad7546d839b7f7375ed7635a674afd99d8cc2b7d896c44ddcf6a2bed4615bf54f05094e6e980500f05f54ae2ae771a76062ccc3a7d2999b93dee79bc32815c34606d73278a994c893a39d96bc458366135be117bd8caef17d2fb"], 0x0, 0x0, 0x0}) dup2(r4, r0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x80000001, 0xfff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', r2}) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)) 00:38:18 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x3, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000)="e0d00ca7a1cc09f5c14fc12b2873fb422bc1cced3016b019022eddaf83a77d52012defbe6a83274eb5651ca554646190c7fc3277bd2623701d9b835f9bbd30244e455c12ceadc9abf94ff58e6ffd41ef995d0a6fcc6eee75c6f509e72e8b44c0c0868459f8", 0x65, 0x20000080, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f00000003c0), 0x4f9367731585858c, 0x0, 0x0, 0x0) shutdown(r1, 0x400000000000001) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x80000001}]}) 00:38:18 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x400) 00:38:18 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ff86356f75705ffd444a87c88ef96d743d86f3d5f58e4f4609683efa6a9c7fe6e48db4130ea9118d0c890a8b2c2d9d8c3049ab3888beeff9653c48d0dce2c1aec9ff375bfd57b2701373f6658bde7bf2bf05ce9f0f304c30b532cd0ef33e9afa698eb889595c55c6ff4e79517ea4340c01b817a6d1391b516c9a3608578056ecfa7520529ff86c2aa870204d832c98e9792d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x3}]}, 0xc, 0x2) [ 379.821036] binder: 14158:14160 Acquire 1 refcount change on invalid ref 55188901 ret -22 [ 379.838575] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 379.853703] binder: 14158:14160 ioctl 40305828 20000000 returned -22 [ 379.861786] binder: 14158:14160 Release 1 refcount change on invalid ref 0 ret -22 00:38:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in6=@local}}, {{@in6=@ipv4}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$9p(r2, &(0x7f0000000200)="b2aacb2872c58ee6c017d06d0b544d2fcae5c62972b2ed5604a71e04c5bac11ef413d2f82821a9bc2bf8801de3c494e888689baf1283c51bcd7a8ad28e4985af419e7b8192e476ef90f7a08ecb41626b2a4dde811c98d4231aff78f6c396c63dc76349f75b1cfdc376fd2f706776330526f021ea214092800fcadb64ea2b0534c6127a919e80eb1d3e8cd9082233a9da5778bb799a68c66873d1735930816a586c75b512", 0xa4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06630440008014d02b"], 0x0, 0x0, 0x0}) 00:38:18 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f]}, 0x45c) r0 = socket$inet6(0xa, 0x3, 0x9) r1 = open(&(0x7f0000000000)='./file0\x00', 0x5, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 00:38:18 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x7, &(0x7f0000000300)=[{0x0, 0x6, 0x0, 0x6}, {0x9, 0x1, 0x7ff, 0xf918}, {0x8000, 0x0, 0x2, 0x100000000}, {0x9, 0x7, 0x2, 0x1}, {0x3, 0x0, 0x101, 0x6}, {0x7, 0x1, 0x5}, {0x4, 0x8, 0x8, 0x3}]}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) r3 = getpgid(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={[], 0x3, 0x10000, 0x2, 0x2f6980000000000, 0x3f, r3}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) [ 379.870137] binder: 14158:14160 unknown command 1 [ 379.879230] binder: 14158:14160 ioctl c0306201 20000580 returned -22 [ 379.900089] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 00:38:18 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x0, 0xaa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x48020, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00@', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,default_permissions,smackfsfloor=vmnet1-{ppp1,audit,uid=', @ANYRESDEC=r3, @ANYBLOB=',subj_user=),rootcontext=staff_u,funECK,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) restart_syscall() ptrace$cont(0x9, r0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.origin\x00', &(0x7f0000000680)='y\x00', 0x2, 0x2) mknod(&(0x7f00000005c0)='./file0\x00', 0xb312d3695fe4ff0b, 0x7) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 00:38:18 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:18 executing program 0: r0 = socket$unix(0x1, 0x801, 0x0) syncfs(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/252, 0x1}) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000140)="00d66cfd298cd2b8561ac8f4cf53f78106ba9a1d816e7f04d58e97906eadaa0d5e083a953b51f9c2d95ed6e336df5c5cb2e6bd8fc9838c7cf4af119afe61a768669cd0ad4ed15f1a5ccd2032a6", &(0x7f00000001c0)="193c50faee22e4c0bb1f1bb3de5e0298913315393c551a9338e93787b6f305c4ba8def57b8d9d21ad0a283"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 00:38:18 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000001c80)) sendto(r2, &(0x7f00000001c0)="1430dfdbfc9258edbf40d6d28a0f02e367bf5564e50effd423eb358d0c826bcd9e0c609cf802778891c27d450ddf15f2ad6817f450570445ce84fc63a0723b06f4abeba78982e3b6ccd6cbeef6eea183a9f5e9f8b7a1078ee95cff9da27e37c91e9cb87b1dfee0c9ee08382e79a12f0f1db931921658d79461fdd06d4211bcd05ae908a3e6b3d8031437c7", 0x8b, 0x3fffffe, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x4, 0x1, {0xa, 0x4e23, 0x3, @rand_addr="b7d980b06f70b56e9347b0c68a6ce485", 0x1}}}, 0x24) setsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000040)=0x117e, 0x4) sendmsg(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)="8c008824c4aac9e5f468fed8e189080cbd988a6d8ec8e26b969901850ce3fe9c9200d4", 0x23}, {&(0x7f00000003c0)="a00eb368d30645441bf72f540cd1f8be6071d9527934cb9e71646a9efa8a11c95a4a54a6bc0c51a61cacb9ea544fa7b2d74abdfa1eddcf059d8d0c76264befca8689b6194f752abb609d7143231570878ca20f3459f53d48b539b49a3d91fce1debc1e55", 0x64}, {&(0x7f0000000440)="324e71736b7116516d30dc3acb", 0xd}, {&(0x7f0000000480)="a425828027ef819be58b36dea4f502f2412574cc45f4103b70371220ef931879a63b8a0a4caebac75a6f6444cbf0a0b495d849bbed8f41d1c09d9de06a95507f4332c0313f45978c8c4142349d1ea573ed0d3b81e3c6dae9e6a9017ea70db3d9aeac93135c8ef317272067ec5a48916b3096a1c3fe3c8e187096716f774bb5a4b855f603ab390d1783b1da2337a1906e69e29c3f11389ed6f31c1b2bb2499cf44e7d4a71d1841ceeb2f0f38732", 0xad}, {&(0x7f0000000540)="c86edea77c5acae4fad2fe30077ebf20886e26e6df6fb4f319ded4cb5c227427598af55036c001e17251c2bf302e4be4e963f6ba49d6a52e1184fc599536f82f47b4fc81ce9792f5e0aaa6fd38e7ffce1adc0879925df0218d37eb601e31ad49b1573e5305166b8ed31d005148ccf84be9e22f7c904ae266d527eb15293265ad60bcde5a719f207936f69829db5ef578b8979db920b3", 0x96}, {&(0x7f0000000600)="bd4da826a1aa31c4b69a8a0ce613ef73877791a6bf72c410636ea342e81f99619d82822f177d684841f344dae6fad79dd8421b7a1eb7537f352d3c79bbcb4dda546eaed2384e10915e853ab7d006f8f5d340f9f386a2681cdf43f74b5c12e73a79c1b156fa34cb4255fac3723b4324614ef337d3ced5a6d3ebfadf2fa01f75aedfc7662fdf604928952bbe704dfe7cd584746ecde12f5726f51df625ee17668180042a9237749000e0924bc71acf648f835e4fd2ca0197a0ac1e9b7c59a85c4f2bfe4cba4538a5eac695f3cee104a3f8d7f4e57efb00b3e73f63b579510635145dd41aa0bdf6b4ab86", 0xe9}, {&(0x7f0000000700)="a6bb69f277371f6e1f70ad629a707897039c0257f215ed875b6b28c6290a082a3704d330c5f819de8b4e4f564637c17a8e81f97aa9661b86a9b2b4ea842fb498522390d173bd7215479024a4d24b3ff295ae5547011d0e0b1ad34d2bc9f11acbba8c8bea7835d94422b792435290c4804f5c923a3708de1799fa8f76586027be2645f9903cf769bf09d4e278d568575165536a44c83b4d7f6439063c74aff9", 0x9f}, {&(0x7f00000007c0)="8f0b1f4e3eb1e583189e1f98d7f87e64822db0a7ac0f5d4f993ac2352f2fc4c40a829dabb6742f2bc30d4a5163cfe3098254830a9079e060ca057f539af5473ea32e4d5c06ca7a65c01411ad756382d51e81cda25008f323593edd8f9a757b337887d71d0449eca2e017a2409d4945d4ccedefd1cd56674fb7625f1b3f102af87cacfdf04dd587298504cfa39c661b58910a1c26164a8cd5ffa695993dd8e51c54177bfaaee87ff49b961900c0fe7ab9f8b8bc88e7a47af4f0", 0xb9}, {&(0x7f0000000880)="bddf130ee54bdf2bf86c01928be4c88211cd31ba754938205c7aef537c48dddc9daa933ecf19b1c9af9e8a5e", 0x2c}], 0x9, &(0x7f0000000980)=[{0x1010, 0x13f, 0x1, "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"}, {0x90, 0x11f, 0x3, "ff459dfc8d0f04050d85097259d564644d9636838e73b8395c88f984fae2277f81ae36d5f8a36c792b1217ae5131952f2ce6ca4a63a963d07a9b47212aee2a1444cdcc5805ef76c7d00574f5547d62b0372b40fd725c956d49783111e34945ca792c6a3e2f4c5080671027d7c685f13038fac0c94c657dbde2217f"}, {0x108, 0x1bf, 0x2, "9180ace17e75efc8d257b19b2a803ef9e1b49ab2e853fc8fafea7a431279e0e61bbaf0984af6855496afe0ae69034eb4fed1b28de2ad0f72aec2fce9c23cc4f90bac0822af2229c96d4ac9e50b0daf2165329f256a77f0436ae012a3502379603b4b0aded4f8f1506eb54505f78e543d414a4384aec653fdd5bca45b67dc77c1f0795e434e8b6d01c6785703e5646dc666d2937e908b7e78ddcb0bbe74f92b28c71339644b0a63f98c51e3da2156e0e1e37bd2e5c7fa989e39c8cff3cb564a43ca725d195f6c81e81861704afa203e7aa9af1bcac9fb02ba08e1b43601501a19fbe633c1feb090cf93bd9dbb8a5f78a877f8068925e851c5"}, {0xc8, 0x115, 0x9, "e58b14090194f6721e1ad1509540adb0295a804f88f5f55f1698df1f934155e8391bc019f963db0ee5c4d5ca7b56bb6e4ab203469a7b38c196dca22e21d54014949054b99f1aa092ffc3b18128f602e0cb904af5d11ad7fec6a25960a7a5d0080fcb9bf1e657d523369c6d41729df0a816a5dcd9589f3b013901b6456fbe842a7c86f767827e739fb7f209600be423a8ef341f17d4d9f117cd57311b2aa6861802a8e17360e03c5a9c1e69ee479a87f158129b78bfc8fd7f"}, {0x38, 0x197, 0x9, "d866becab7fa15ec7b86ed26e67abd53f5a3dff746514e576ebaf36569adbbfc3341997d946a96"}], 0x12a8}, 0x8000) fallocate(r0, 0x4, 0x8, 0xfffffffffffff1c1) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="a5962a48eb4f8f1e", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:38:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x2013, r0, 0x12) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="c5e074cb0900ff379e21bca88f91ce581b5831f049c8cc8a46bd03a6511051a4d9cc8f35d7168c2eb416fa8c175261d18fdc4def"], 0x0, 0x0, 0x0}) [ 379.991737] binder: 14182:14189 Release 1 refcount change on invalid ref -803962880 ret -22 [ 380.006775] binder: 14182:14189 unknown command 43 [ 380.023354] binder: 14182:14189 ioctl c0306201 20000580 returned -22 [ 380.048597] binder: 14207:14208 unknown command -881532731 [ 380.055622] binder: 14207:14208 ioctl c0306201 20000580 returned -22 00:38:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, &(0x7f0000000180)=0xc) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x40000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c64656661756c745f7003726d697373696f6e732c616c6c6f775f6f746865722c736d61636b6673726f6f743d2f6465762f696f6e002c66736e616d653d2c726f6f74636f6e746578743d73746166665f752c00"]) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x141000, 0x0) 00:38:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001cc0)=0x0) r4 = getuid() r5 = getegid() r6 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003740)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000003840)=0xe8) stat(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() fstat(r0, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000039c0)=0x0) r13 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003a00)={0x0, 0x0, 0x0}, &(0x7f0000003a40)=0xc) sendmmsg$unix(r2, &(0x7f0000003f40)=[{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000180)="af2a44f2a9a4924cddb60011be3e3356b5bbad5c07d4c1de7d02c0c9ed169ec9ffc4ec7b900d29eeebce4a03cb2584696c6e4d92cf5204e121f4ce7ee745d5e6f0012c0e61d2ecb3ecb4a0d522866003c0a9b629b31103c23edc66501e54ce3db82675ed07112f4154dd9e99da21080598b01bc6d6c67c44f7383df9aa41d1d02b82808c0486a948d0d7f0c17bb97f71c928204799a665983d4446922941ba17fad46d", 0xa3}, {&(0x7f0000000240)="9fde6a1da00a1f7253cddece358e8747bb500d9a98888b3feb86e976dc5e701bd12791cd1bb00a13bce9660939f14c68629f247bd6060e3c8e0999841cb3447bbeef6db3a617ea6f546dc6fc319ca8da017cbf199a3c1805e87290840d027ae29bb201efc5c6e078e0e4a8574849b76365b040f088f93adfe7f081ad3bca40cc68aa66e59e6fdb71dbba967a4fbe0ad993", 0x91}], 0x2, 0x0, 0x0, 0x40014}, {&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)}, {&(0x7f0000000400)="4ffd98313f83237abed92791294408e92efd50715ee74e4c8301d9d832166408675730385a0c2543248a23e8096f579b6ff4b69312083a43fdf6dabc85f001b4458d03faf4e0dc9eb8a258df978c0b9c58a489e68f2ff17515e0a0ec5a193581038b22fd9aaeb32420eafa6ffc1312840dd237aa47e77b18b8cef8", 0x7b}, {&(0x7f0000000480)="1a4014dd16ad2321953cb4d6", 0xc}, {&(0x7f00000005c0)="af20a3cacde657b2155a99ce5c333f722fd5e9f9caf978bcfe30bbb5b1910e6423200a83950808cc35d9b0f317a19268806d2cdebe82957075d1a1580d140c1edd25afb0ed40c29524059d79ff9f04eb641e62d57bb372434a21135fa42196e2e602a7432f8924217f08b28fd39c2ae047bf6fa9db98432824c92244e224c7654476e07b61bbd7659538df271ae1fb5208c20aa9f7eb671027e61339ff92e701200232526a2255bcc4799391b65976edeb904b69eddbfb68f8f83c700c58aca839ddb6551bb0895af8a18655e2556ae25acbe702a8c2", 0xd6}, {&(0x7f00000006c0)="e817eb02e8b21c9c6e12209d6643059f466340e6c1c1ec400b4ac1067c787c1813fd9944d27e5feadcf131d658cf2d94ebbe5dfb6fa8246fec64e95df72711ca102f063b2dc5de519af28a04e96ccb89dcfff04439d9c9b530bba30c2148f4531e4f8d5188bc648f123a488fc9965159dbdbdb4a5a7d6fbd01a185b7fb7c509fbd8aba2c441ac2dad1d109ec6622c7b0101e45fc4dfb985ea51b4280488e0d930f8dbf924e7fc59348ae356fbb10240dcc206b8e9a872c16846668749b9bbe5516e61af25aad63fc6ea8a819", 0xcc}], 0x5, 0x0, 0x0, 0x4040}, {&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000540)="5ef8ff1eb9885c1661f8e8b692df5045d2b42db3ee4cef0d7e735f5f7c737fafea44f9e5531921c503196b", 0x2b}, {&(0x7f0000000840)="1ac981a4d56950d5c1502be36aee63cecb3044dc7a3f78998e80b65b11f47301576f619e227f34d04db00933a460b6da07352f0b45097343865703402510a62887de14d29e7eac01841a7eadfceaebb435eddb393e8ddab6692f6f6bd71e850829c87ecf27175e3cecb8e7958fb1dc08312c8f60cc6f6c0eae92ab388ce6ed6cb74a97c4ca9c02652321f76cc6d0d60ab11eb86828b04a8915c3e64403a46125b6ff32c0276db8042b86f6af252e809ab86552c53554a83731bfc4f290e6baf74612825f44245c8c16a764de1e05848eec527c8194bb05422251", 0xda}, {&(0x7f0000000940)="b03f97f5b1eacda1dbb7fcb180df833dcbda594494bcb2308e6fc5b184465d9a7a4077c68771f4edf1d0bb2949ac17536babacdc3bcbb3f7408ca69285c9bf742147dabcb7c18f45681a740287", 0x4d}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="d6d7ffcad19cf8e07cd42e2caecdc2a04e291a8e731ee5d30f4d2e949c3ab62148d597049ae26ebdf8d23d533feef9ba6285426e30271b6898514baad755264b8318c3da8cbd649b481190bf99b5fff887fb22fbfcb9bbf929149dc35e6cba5895653c761c52831b7304", 0x6a}, {&(0x7f0000001a40)="5bef935f37f4e4c59b0cd13e71fe17bb7f06119571bcd2256d7c78723a03a2a8b585873773e62dc177eebb7560476a1d4a695607215d5777c6c2394ca9150e652255306b2aa6eb86dc5f60d818a0bd9c7451cf021d8c05a423c433287207e492145f246eee12c761842a05ff246dbbf539deadf9151be4d91c3f548e415854c5c08ac96c87e26bcfe62489f1cc8bd997b32376cad5debbebce214f6df56a20cc0b20c158be1b309cdfeced8fd0c9199ced65d21110c1", 0xb6}], 0x6, &(0x7f0000001b80)=[@rights={0x30, 0x1, 0x1, [r1, r1, r0, r1, r0, r1, r1, r1]}], 0x30, 0x80}, {&(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001c40)="b1dfa14c409ce77fcf48f529bb85260491cabd85c3c124dc23a1cb6fa71575320f13c657e1", 0x25}], 0x1, &(0x7f0000001d00)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x30, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, r1]}], 0x50, 0x4004090}, {&(0x7f0000001d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001e00)="4dc185879e947e38ecd601af416d56aa521baf616b33d3e5f3fffdcd94758038dd1e71a673527b6dc7f1c98e248a8fdb0b92d2bcfef543476b47d27463cc68e37fad52489419759a1d0c825f23d7aeb9bb885e53bac003f68a19aeec7e8d13ab32e826dcf0ed8df367c1253a35c1ae50ee756a25541b145673bc1bfa95a2cda7052f50acc623e0e084728da8bc65f70d3f0810dca0a3a0aab94192d13a26e2a38a8fcb3d17115dc2baf91373c07b2cad20a1ed493d7a5155a647bffa577e078066f8e9339083c42b4cbb5ae2c6fa48425d415bf31b6c98055f5b30aa2c986a370d6a975dd813e0fa78b9b0e5986b5cccb629b82b350bbeae12", 0xf9}, {&(0x7f0000001f00)="80e3b695c36570b98d90dcfbfa807b985b4125ab0deb85e3f459ec139d284d1d01c589caaf776866bc5ac6321ce8e4c269a046bfa9dc362c25796310df84c4eefca00201160e347b72837c7abb517593eb5288de43c7177093fd707cbb7a64f925e510fa63d196c3750ff06f20300534c8deedebc3d3a6c35041bd8f11f3c7c95ef9f5d6c2f55afc39b33f824485837d7fbfa8cccc72eb45e5a5d0d9f59f5767c4fcba854e975cd69d2b6c0c329bac62b75eafd46f166963f03a88279799b5fe42e2cb9aa28ac2", 0xc7}], 0x2, 0x0, 0x0, 0x44091}, {&(0x7f0000002040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003680)=[{&(0x7f00000020c0)="876a8e5cb7943cc9596d77ae0a254705b2bdee45a05c7b688848be1d3c6e03695512b5da06a33bf6f1ed84758152482831dd6ab47ec76a27910d8e50387265cc3b5ab0e2b03fae7277cb4101b60dcd61838c554e3c74d15834b69d0624cefdbd1b9f5074dba21a47430a4951d7b336e7c65fe682dafa57f4fabf6d4cd59fc84eb60411355c53bc2aa6", 0x89}, {&(0x7f0000002180)="6316133202f648f4e36f1dfe99aa4916ca0a347a1a15ccaf8481da82ec54edd5006994b258f27cfaabca17f9e74ae8a3287a1ebb7f5f5b3feee677fe7a3e72b6750dacea1796a021f626e0882befca09e1bc96f259507e2eefe9bdd3eac0f032b90f0db016d469b5ae662fbc0cfea7ec70c6a1dcd9a902d6d948c8b647bc4d34f67bcc642a2a0a3915f8270d037f50", 0x8f}, {&(0x7f0000002240)="f0851cc41ab1009a70ee2803756b3ddd5b4ca7cf630b814e63354e6ff505db793c7cb9b4a295003a214dee8b55d0ad7acd58e8a8f2b6410b6f589f0f36790f20a52a39966d50c6f624b6f09f1369bc4e8728f3265eff86160de2c827c1de143d23ef74563ce27d5a76ef4f3ce41959c024ac420ff125d385a0da2c6bef463fdb7e79ef5dbd7b11cc53e0683af108c0a74061a09379dd8f0945", 0x99}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="3218674c7543da948a533e07ca477d5104776236b61a214b35e923d5c8a875faabb7c87fde2427316811a042aed37601de7acc4e596ca3c968dc1304bbf729dcb1be3dbd8e9069a56ec03906f67fce59d4b86cd7a7e30992eff5d97fbd99a397e7d470ec12facb57a5d1543642aa2a36b69b9dac50da1b7cad670aedc74e6bc8372592", 0x83}, {&(0x7f00000033c0)="0dbd650a2b095211e8f0f72d3f728aa1b62cf3d21094c0b4c3d291bf56cfc789bf9ba8b72ab787f601902c751cdbba6e8bf33665049873c27ad78817f6ff94f563614607b35188d782698b8f19e4e07e2ae16a353108a4b74d55d6dbe1c33b8527870066ede27acf3fe5f71c687ec0556c85013a1fcaa047ed9f65ab39c7a4f162477e2de986db91328c05d1", 0x8c}, {&(0x7f0000003480)="bc5dfdac8746d7f3a90c4fcac63e3ddf4dcfdaee096424709a3cf9560444696176b832f5ed371903e9973002d2507a9957e6c6b54e4977c66d0b23040d8be106f1e335ce5f34b5990ab7f50d84a9fab60d4c069ac83d712ce3246a9932b671ea210beee0ebede8ac0dd1c8301c5502cce2efd1e2aaccbffe80d0e9132230bd0071fca20ac00c94d50df71ced", 0x8c}, {&(0x7f0000003540)="144498ec2ae4c0b7042733746d1f241297a88d0ac485332008af05d3918c0a46149464bb0c686b076debed0b734408d18f76b685ab3c6702b0", 0x39}, {&(0x7f0000003580)="18e2e0919244c623f1dc17519004e7b8d0a7e8a90d55b7e76a87b9f9b8ad620fe8190ff8ce92b97232539aaa6d5f81d4e6295f0388b95b45a965ff8c1f6a7040f927fe5fd571eecd33ad8f1bfbd835294d8991f6f6ac100ad8dec6c103f9869d5e608123144f2c1b78b9a1ed9b870278e8088f8e1819f798244db35a6bcdf13e3b6b5a0125e0866d890d67fffc165bbb6c6fbb6014d85982efbe9e051aa2ddcf2262b1949512537400812d9cbb230eb042fc6aaf6f70ac58adf5ae", 0xbb}, {&(0x7f0000003640)="5d81a851e0be4d6a166a6244c70314a466ccd4594a381d1ed687e103647d51a8be1a49dd0c360c", 0x27}], 0xa, &(0x7f0000003a80)=[@rights={0x18, 0x1, 0x1, [r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1, r0]}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x18, 0x1, 0x1, [r0]}], 0xd0, 0x800}, {&(0x7f0000003b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003c00)="c6de427980d52e56978342358926672421d0337f7a6176c50ed38fec9d5af60fb681e7bd83de33f4cfe55ba909662582abad9bade4b2478b53e30ea0569b34d367cb130b4e444962379b31855254118292760406563661a7f76d75f6c24a628f3333e6b031a0e5c997fa610dcb9974517d5401456a2471501e7591617513584dff4ef7581851df1eca0169839cfb16d8c431053d1000f3bcefd654b425c2c84762c42549593f3edc9c6b1bc70bb524a6799169afcb359b9eb5", 0xb9}, {&(0x7f0000003cc0)="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", 0xff}, {&(0x7f0000003dc0)="8a7ef0b2ae878653169e02330a1ebe541222a6d2467057f4b3cfa148807cd7b1fdfe54ea6c386edd38a9ae789332ad7f25b072cd0b559dcb019c246d730103d44644331cd7e7935e1945a7f2bd9b103479252a9c0b271393a433d86baf332c81d7cd8d9225075b22cc3d6dfeafd8d7c04ae9b8761e45077d0c67934bfe95cd59ae652bebf358ab04547697b8be2a60ea36e3fce11dc27ccf5f50e793a528e8a5aebf739704613966c05585455ac0dfefee5ee945a0097f74b46982ea3e779cde103c4fd1f3dba56a93f9d88b4000de8e09b191a78b4d8be7", 0xd8}, {&(0x7f0000003ec0)="fec4e5ce73199d8712a0324ef4ee88fc7dec10e0", 0x14}], 0x4, 0x0, 0x0, 0x40004}], 0x7, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:19 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x3c401, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x11, 0x800000003, 0x600081) bind(r2, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) dup2(r1, r2) 00:38:19 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x608, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="5c1546", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000000)=0x4, 0x4) 00:38:19 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x7, &(0x7f0000000300)=[{0x0, 0x6, 0x0, 0x6}, {0x9, 0x1, 0x7ff, 0xf918}, {0x8000, 0x0, 0x2, 0x100000000}, {0x9, 0x7, 0x2, 0x1}, {0x3, 0x0, 0x101, 0x6}, {0x7, 0x1, 0x5}, {0x4, 0x8, 0x8, 0x3}]}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) r3 = getpgid(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={[], 0x3, 0x10000, 0x2, 0x2f6980000000000, 0x3f, r3}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 00:38:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000340)=""/180) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @rand_addr, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, [], r0, 0x5edfb77e4e29b36c}, 0x48) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2, 0x0) r2 = dup2(r1, r1) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x1, 0x1}}}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000180)=""/13) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000580)={0xfe68}, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x989680}, 0x8) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x12, 0x1d, 0x0, "9288f4ab2db49dd9b2dd2f0d7900a2961d2a03f6c2b94dfcaae343958bb5698ca159c4a795cb5c4c566f5fde7b8e3348bacc95640924ff7a2746cf9838d62df8", "055779e8219c897c457e640e746a2d823b7a346c51aa1a236ee3c664314768ce73f7a64f6cfffd8ced36a2a9b5fbe2e53502cc043f4986cccb8314a96e3b7cd3", "72046fdca95b6740bb95d1c7e60f727ffe40e580e5c5b9794414585c703ea895", [0x3]}) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x53) mprotect(&(0x7f000062b000/0x4000)=nil, 0x4000, 0x3000004) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000240)) io_setup(0x3, &(0x7f0000000880)) io_setup(0x9, &(0x7f0000000000)) clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 380.674566] audit: type=1400 audit(1552437499.597:44): avc: denied { setopt } for pid=14228 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 380.701559] binder: 14225:14235 unknown command 1 00:38:19 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f00000001c0)="ed2eb062ccd99fa08785a2c2b4eeed7506c09d7aafe62158b8ab99aff0d35ead35ebe2e86bba9323bc55dd0969a576f42d369ca0b4452405efcfb012e342419d463ce1b3633fca4c0bb8b728135863a34a1c6c406f8d68a7d5d3fc37e6946a1037b3c487d626a91ed521df41211a9f46f31ec2a08df2dfe8c9e01d0d068583ee42fe442accde2a195c757375d6dcccd04c86ff23dea6e624fa", 0x99, 0x5}, {&(0x7f0000000340)="e04e2c99f10b4abd7489a988a6cb6d26ca7d669183be285f5716ff1612c4eff70a6c2f8d1eb0051fbb5279b21e96807bed6c17df8f190b1cd86d532365378f18d972f830804b25397740f3316a5b1e582315165faafa90d3465ed17d3f354842d91b46a5d5183837d1b2de0dfb98b6daf903c78f82601bf489c1a063dbad51c883ec8573452a3dddc7035e9cf68a4e976eccc884168c90d43751e532c208bf17872dfa4e22dd3c27e5bb60fb07b55c199b0ddf3a130ae59b541b845319f9b039c780b8da81e12a5950ec79d9113e33a51171b47bcc45e52d4951a8d7a8a49912e5ab11cb0099d60291b9143d25da5f7406", 0xf1, 0x470}, {&(0x7f0000000100)="54e837bd092ae9a4691225416e1653666e5aa03ef871622dc4eed39f2159", 0x1e, 0x5}, {&(0x7f00000004c0)="440fa47cf9ab978f1e21cef92cff4075e43053a94b72a6a9ffb398cb0076053b6f52d6c49a8c4c4cb55602beba5d8b8c619942ad9a5cdc33101b1fc305f2ecd4efc2ce7e3ec687347543112aeb4e2754011d3fd56c7b2bda95b907798bbd7d413da3919081853ca214eb28276224f30624f9e27120d62a85ca6e48d06a898a468d1184249a5d1a081aa08719e60e70bc425ab27c45abfec4ab726870bceb4f4a484c70ab14b2ab6d20f7de3841076eb7f965fb67c1a239e304e99c69ac70eb6990f3591f355f69a282265b117c1f99", 0xcf, 0xfff}, {&(0x7f00000005c0)="d242ccf87f6778a5b1e7c2b9b50f439069ea8731ad4cda0725972913f67acd1741128b4d03c4b075ab36ea03eb98f1754339731e187435deee06af326ed893616f3b2fd47fafee8274285a1f88758c021e72286fa8cd4652c16e76b46b81b047a18837e233b44e6cda8d3233b8e51a51bdbaa4c58f7219b7525553523c6626df4b745a24efda4631c030aa5e86729ae72d0f6c25100b386bae548221a98ca1150f670e8e5ef13dcd781d2a63bc460fa2c5bd9fb32c88e2ae5ba3712f1f2a306167ec1ec64f2f", 0xc6, 0x5a15}, {&(0x7f0000000280)="8980630872c6484d0fdbf20c30a7342fc15ab9e693d0f2a37ed84091fe8000e7628692f4fa075a3658786fabc633a1f368591d1a3b3720f343d06ea34e4d8581323dd3aedc8014b39022d6c39bab97aced3da02a5d85a188de71aaf521d31d03baeb9d8b3769c1e660b1b648d0c63bc7ec101cc2b1871b", 0x77, 0x1}], 0x200000, &(0x7f0000000800)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortname_lower='shortname=lower'}, {@numtail='nonumtail=0'}, {@utf8no='utf8=0'}], [{@smackfsdef={'smackfsdef', 0x3d, ',$'}}, {@hash='hash'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r0}}, {@hash='hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'rootmode'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 380.701567] binder: 14225:14235 ioctl c0306201 20000580 returned -22 [ 380.732543] binder: 14243:14245 Acquire 1 refcount change on invalid ref 0 ret -22 [ 380.741512] binder: 14243:14245 Release 1 refcount change on invalid ref 0 ret -22 [ 380.760000] binder: 14243:14245 unknown command 1 [ 380.767245] binder: 14243:14245 ioctl c0306201 20000580 returned -22 00:38:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:19 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x2, 0x0) getpeername$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(0x0) ftruncate(r4, 0xbb1) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) gettid() flistxattr(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)={0x3ff}) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x240301, 0x0) 00:38:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 380.785705] FAT-fs (loop1): Unrecognized mount option "smackfsdef=" or missing value [ 380.804497] binder: 14254:14258 unknown command 1 [ 380.810887] binder: 14254:14258 ioctl c0306201 20000580 returned -22 [ 380.861757] FAT-fs (loop1): Unrecognized mount option "smackfsdef=" or missing value [ 380.931940] binder: 14266:14273 unknown command 1 [ 380.937129] binder: 14266:14273 ioctl c0306201 20000580 returned -22 00:38:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, r0, 0x0, 0xe, &(0x7f0000000240)='keyring,ppp0}\x00', 0xffffffffffffffff}, 0x30) getpgid(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r3, 0x7571, 0x10}, 0xc) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x2) 00:38:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563044012719d2a5ec137137dd10acb1c77ee89c1305c277d39629a2780032cb9f575c7877598166595dca89d083f357eb6277ac0d59ccca21c2efdcefe1df2f76455ce155f39f4cdfec87977e9215ca4c1fc9d661996eff01ced7a107bc6f70acc810e3f9770e0ceb7cd5bc0c6fb189ff3b938600ac9"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x20, 0x4, 0x93cb, 0x2, 0x0, 0x0, 0x14c, 0x38, 0x2ae, 0x400, 0x672f1e3, 0x20, 0x2, 0xfff, 0x9eda, 0x4}, [{0x5, 0x100, 0x7, 0x1, 0x6, 0xbe61, 0x0, 0xfe00000000000000}], "c6d4c568d2a0a656a7d6ea13985fe48e975d69b601cd35d1d010e5e84b069f0e7f3e5f6090efa88629772937604d3d88ff635641a56a72832453f632cdff02093cb14c777774e8a5a94bc1b1981bbf699d3455befaf25185cf5ece549629880ef9a589f232810ca2c57e99b86a7f2d39fc1c7339fe6c7ce1b1a1f69535e162eb7b00ada684c9bec87e16e56c4f41f4be94af1b517dcb09a427c759217e55b0464ebdd2", [[], [], [], [], [], [], []]}, 0x7fb) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x2, 0x0) getpeername$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(0x0) ftruncate(r4, 0xbb1) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) gettid() flistxattr(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)={0x3ff}) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x240301, 0x0) 00:38:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000340)=""/180) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @rand_addr, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, [], r0, 0x5edfb77e4e29b36c}, 0x48) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2, 0x0) r2 = dup2(r1, r1) write$P9_RLCREATE(r2, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x1, 0x1}}}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000180)=""/13) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000580)={0xfe68}, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x989680}, 0x8) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x12, 0x1d, 0x0, "9288f4ab2db49dd9b2dd2f0d7900a2961d2a03f6c2b94dfcaae343958bb5698ca159c4a795cb5c4c566f5fde7b8e3348bacc95640924ff7a2746cf9838d62df8", "055779e8219c897c457e640e746a2d823b7a346c51aa1a236ee3c664314768ce73f7a64f6cfffd8ced36a2a9b5fbe2e53502cc043f4986cccb8314a96e3b7cd3", "72046fdca95b6740bb95d1c7e60f727ffe40e580e5c5b9794414585c703ea895", [0x3]}) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x53) mprotect(&(0x7f000062b000/0x4000)=nil, 0x4000, 0x3000004) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000240)) io_setup(0x3, &(0x7f0000000880)) io_setup(0x9, &(0x7f0000000000)) clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 381.498425] binder: 14292:14297 Acquire 1 refcount change on invalid ref 714961170 ret -22 [ 381.507617] binder: BINDER_SET_CONTEXT_MGR already set 00:38:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:20 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 381.507625] binder: 14295:14300 ioctl 40046207 0 returned -16 [ 381.509827] binder: 14295:14300 unknown command 1 [ 381.509847] binder: 14295:14300 ioctl c0306201 20000580 returned -22 00:38:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 381.565449] binder: 14292:14305 Release 1 refcount change on invalid ref 0 ret -22 [ 381.565455] binder: 14292:14305 unknown command 1 [ 381.565464] binder: 14292:14305 ioctl c0306201 20000580 returned -22 00:38:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 381.569919] binder: 14304:14306 unknown command 1 [ 381.569927] binder: 14304:14306 ioctl c0306201 20000580 returned -22 [ 381.608844] binder: 14309:14311 unknown command 1 [ 381.608852] binder: 14309:14311 ioctl c0306201 20000580 returned -22 [ 381.635264] binder: 14315:14317 unknown command 1 [ 381.635274] binder: 14315:14317 ioctl c0306201 20000580 returned -22 [ 381.673224] binder: 14320:14322 unknown command 1 [ 381.673232] binder: 14320:14322 ioctl c0306201 20000580 returned -22 [ 381.700882] binder: 14325:14326 unknown command 1 [ 381.700890] binder: 14325:14326 ioctl c0306201 20000580 returned -22 00:38:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:21 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffff9c) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/18) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$KDADDIO(r0, 0x4b34, 0xff) 00:38:21 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x6}, 0x30) 00:38:21 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x2, 0x0) getpeername$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(0x0) ftruncate(r4, 0xbb1) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) gettid() flistxattr(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)={0x3ff}) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x240301, 0x0) 00:38:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070008000a00000800005d14a4e91ee438", 0x39}], 0x1) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x10200, 0x0) r2 = gettid() r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x3ff, 0x3, 0x9, 0x0, 0x4, 0x80000, 0x1, 0x80, 0x8, 0x3, 0x0, 0xfffffffffffffffd, 0x3, 0x2, 0x2, 0x100, 0x1, 0xffffffff, 0x3, 0x6, 0x79, 0xfffffffffffffff8, 0x8, 0x0, 0x0, 0x6, 0x2, 0x8dd, 0xffff, 0x800, 0x4, 0x5e1, 0x0, 0x0, 0x8, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x1080, 0x400, 0x7, 0x5, 0x6, 0x9, 0xe31}, r2, 0x3, 0xffffffffffffffff, 0xb) r4 = dup2(r1, r0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2100, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0xffffffffffffff01, 0x7ff, 0x9b3, 0xe823, 0xc562}) ftruncate(r4, 0xfffffffffffeffff) socket$inet6(0xa, 0x0, 0x80000000) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000001c0)=0x70, 0x4) 00:38:21 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f00000001c0)=""/188, &(0x7f0000000140)=0xbc) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='W\a\x00', @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB="043c73496222fd8cd5c5e4d56c0bb466e67df8feffffffdc", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:38:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x3, 0x1000, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) [ 382.327985] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 382.348478] binder: 14336:14348 unknown command 1 [ 382.348487] binder: 14336:14348 ioctl c0306201 20000580 returned -22 00:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000180)={'bcsf0\x00', 0x50d}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x177, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="066304400000000001e41f0a69763afe70f86c1a9b67f55e2223ee9088877b062cc8af3f5d607c3708f31663c97bb4269321e5ed9a707b5536a7c034628991f0c7827a727555124911765c"], 0x0, 0x0, 0x0}) 00:38:21 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x30, 0x0, &(0x7f00000001c0)) [ 382.382992] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 382.404186] binder: 14350:14352 unknown command 1 [ 382.410739] binder: 14350:14352 ioctl c0306201 20000580 returned -22 00:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000200)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x5e, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') accept4$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10, 0x80800) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000180)=""/119) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) [ 382.423873] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 382.423883] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 00:38:21 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x1381adffd5d4121) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x8, 0x7, 0xa81b, 0x3, 0x800}) r2 = getgid() r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x7ff) fchown(r0, r1, r2) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000380)=0xfffffffffffffffd) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x820, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f00000004c0)=0x1e) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000002c0)=""/52, &(0x7f0000000340)=0x34) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_im=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwrite64(r2, &(0x7f0000000240)="8f752dbf855a6b4fd69b8e303fb8e8ee7f1c3413f7bde9efcb24adb6fc1d89e9f10c6e1b25acf4274fab40222d439a3292ba8f93fbbec60ff4e9586d562d9c7a019ef3663e3b062f56cdefa488abfe572e7779a3a2ff85b914a7aa091c315762984bfdbb08154dda0e7061b30f6e4609f772d4c3f2daf914386a99e141a3b8d40ffbc053473dc2c9b603714afa0f19a72dd8c41a35ea90d6f01b9908aac33bbc", 0xa0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 00:38:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x80000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$getown(r2, 0x9) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x427ff) [ 382.457976] binder: BINDER_SET_CONTEXT_MGR already set [ 382.457984] binder: 14361:14365 ioctl 40046207 0 returned -16 [ 382.458433] binder: 14361:14365 ioctl c0306201 200000c0 returned -14 [ 382.461129] binder: 14361:14365 unknown command 169862145 [ 382.461138] binder: 14361:14365 ioctl c0306201 20000580 returned -22 [ 382.513778] binder: BINDER_SET_CONTEXT_MGR already set [ 382.513787] binder: 14378:14380 ioctl 40046207 0 returned -16 [ 382.517913] binder: 14378:14380 ioctl 1263 20000040 returned -22 [ 382.518447] binder: 14378:14380 unknown command 1 [ 382.518454] binder: 14378:14380 ioctl c0306201 20000580 returned -22 [ 382.571232] binder: BINDER_SET_CONTEXT_MGR already set [ 382.571240] binder: 14384:14390 ioctl 40046207 0 returned -16 [ 382.572351] binder: 14384:14390 Release 1 refcount change on invalid ref 1441792 ret -22 [ 382.572357] binder: 14384:14390 unknown command 2018148353 [ 382.572364] binder: 14384:14390 ioctl c0306201 20000580 returned -22 00:38:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000531d19a12af21fcb"]) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r2, 0x0, 0x7fffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) 00:38:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) mount(0x0, 0x0, 0x0, 0x841405, 0x0) pivot_root(0x0, 0x0) 00:38:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=""/145, 0x91) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = getuid() getgroups(0x1, &(0x7f0000000040)=[0x0]) rt_sigreturn() fchown(r0, r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e8050100"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:21 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0xe, 0x2e, 0x9, 0x6, 0x1, 0x1ff, 0x3, 0x15f, 0x1}}) linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f0000000000)='.', 0x0, 0x1004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000140), &(0x7f0000000100)='.', 0x0, 0x3002480, 0x0) 00:38:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x1, {0xd, 0xf, 0x2, 0xd, 0x2, 0xffffffffffffffff, 0x5, 0x14d}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = getuid() getgroups(0x1, &(0x7f0000000040)=[0x0]) rt_sigreturn() fchown(r0, r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e8050100"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 382.856730] binder: 14406:14410 unknown command 1 [ 382.862270] binder: BINDER_SET_CONTEXT_MGR already set [ 382.862280] binder: 14404:14408 ioctl 40046207 0 returned -16 00:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16cb8f3e"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:21 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$selinux_status(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000000)=""/72) [ 382.887833] binder: BINDER_SET_CONTEXT_MGR already set [ 382.887840] binder: 14417:14419 ioctl 40046207 0 returned -16 [ 382.888786] binder: 14417:14419 ioctl 4028700f 20000040 returned -22 00:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="056304408c17822c5de0a02f28fa57f46767cc2696d1d2f7821f3a18ca14622a70d004692c88187cd718c9a14c4de59326aa8d3d023235a22bc57188c77338bfa92b1d184472e673fdf2b8e25396e9588699403c8fa8b2fc013f06f08c716799678f5d1acc2145c4ed0faf9a5e54"], 0x0, 0x0, 0x0}) fadvise64(r0, 0x0, 0x0, 0x7) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 382.894333] binder: 14417:14419 unknown command 1 00:38:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 382.894342] binder: 14417:14419 ioctl c0306201 20000580 returned -22 [ 382.948292] binder: BINDER_SET_CONTEXT_MGR already set [ 382.948301] binder: 14422:14423 ioctl 40046207 0 returned -16 [ 382.949465] binder: 14422:14423 unknown command 1049611030 [ 382.949480] binder: 14422:14423 ioctl c0306201 200000c0 returned -22 [ 382.950371] binder: 14422:14423 Release 1 refcount change on invalid ref 0 ret -22 [ 382.950376] binder: 14422:14423 unknown command 1 [ 382.950383] binder: 14422:14423 ioctl c0306201 20000580 returned -22 [ 382.979494] binder: BINDER_SET_CONTEXT_MGR already set [ 382.979503] binder: 14425:14428 ioctl 40046207 0 returned -16 [ 382.984747] binder: 14425:14428 Acquire 1 refcount change on invalid ref 746723212 ret -22 [ 382.987448] binder: 14425:14428 Release 1 refcount change on invalid ref 0 ret -22 [ 382.987454] binder: 14425:14428 unknown command 1 00:38:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r3}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0x1, 0x0, &(0x7f0000000200)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r4, &(0x7f0000000080)=""/128, 0xae3f1a6) 00:38:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) mount(0x0, 0x0, 0x0, 0x841405, 0x0) pivot_root(0x0, 0x0) 00:38:22 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) fstat(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r4 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='fuseblk\x00', 0x4, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}], [{@subj_type={'subj_type', 0x3d, ']'}}, {@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r3}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@euid_eq={'euid', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, r5}}, {@obj_user={'obj_user', 0x3d, 'ppp1'}}, {@smackfsroot={'smackfsroot'}}]}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="066304550000000001f2635aeb5ee4724d047c09b66b98edae75936579262a0000000000"], 0x0, 0x0, 0x0}) 00:38:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) mount(0x0, 0x0, 0x0, 0x841405, 0x0) pivot_root(0x0, 0x0) [ 382.987461] binder: 14425:14428 ioctl c0306201 20000580 returned -22 [ 383.039302] binder: BINDER_SET_CONTEXT_MGR already set [ 383.039311] binder: 14436:14440 ioctl 40046207 0 returned -16 [ 383.040949] binder: 14436:14440 unknown command 1 [ 383.040958] binder: 14436:14440 ioctl c0306201 20000580 returned -22 [ 383.054043] binder: BINDER_SET_CONTEXT_MGR already set [ 383.054052] binder: 14438:14441 ioctl 40046207 0 returned -16 [ 383.204509] binder: BINDER_SET_CONTEXT_MGR already set [ 383.204518] binder: 14447:14452 ioctl 40046207 0 returned -16 [ 383.205665] binder: 14447:14452 ioctl 400454cb 1 returned -22 [ 383.205779] binder: 14447:14452 unknown command 1426350854 00:38:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000100)=0x200) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000180)={0x33, @local, 0x4e23, 0x4, 'dh\x00', 0x6, 0xffffffffffff055b, 0x5a}, 0x2c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:22 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000001c0)={0x5, 0x6, 0x4, 0x5, 0xd, 0x7, 0x52a, 0xdd, 0x3ff, 0x8}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) [ 383.205786] binder: 14447:14452 ioctl c0306201 20000580 returned -22 [ 383.263341] binder: 14406:14410 ioctl c0306201 20000580 returned -22 00:38:22 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'team_slave_1\x00', @ifru_map={0x71db3923, 0x2, 0x6, 0x7c, 0x401, 0x2}}) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) write$cgroup_int(r1, &(0x7f0000000000)=0x7, 0x12) futex(&(0x7f000000cffc)=0x1, 0x4, 0x4, 0x0, &(0x7f0000000040), 0x1) 00:38:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) mount(0x0, 0x0, 0x0, 0x841405, 0x0) pivot_root(0x0, 0x0) 00:38:22 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x40000, 0x33) 00:38:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x40011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={r4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 383.312995] binder: 14463:14468 Release 1 refcount change on invalid ref 0 ret -22 [ 383.329200] binder: 14464:14466 unknown command 1 [ 383.329209] binder: 14464:14466 ioctl c0306201 20000580 returned -22 [ 383.355401] binder: 14463:14468 unknown command 1 [ 383.364501] binder: 14463:14468 ioctl c0306201 20000580 returned -22 [ 383.373974] binder: BINDER_SET_CONTEXT_MGR already set [ 383.373982] binder: 14474:14475 ioctl 40046207 0 returned -16 [ 383.375988] binder: 14474:14475 unknown command 1 [ 383.375997] binder: 14474:14475 ioctl c0306201 20000580 returned -22 00:38:22 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x5, 0x0, 0x6, 0x3, 0x6, 0x0, 0x10100000000, 0x7fff, 0x6, 0x6}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xbe, 0xffff, 0x4, 0x6}, {0x7fffffff, 0xffff, 0x3, 0x3}, {0x3f, 0xffff, 0x3ff, 0x9}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0xfffffffffffffffc}}) openat$keychord(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000180)={0x0, 0x12, {0x52, 0x400, 0xb77, {0x1, 0x7}, {0x8, 0x6}, @ramp={0x4, 0x64bfe2b4, {0x4, 0xc0, 0x6, 0x6d91}}}, {0x57, 0xfff, 0x20, {0x2, 0x1}, {0x951b, 0x9}, @const={0x5, {0x2, 0xfffffffffffffff7, 0x2, 0x10001}}}}) 00:38:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000040)=0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:22 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0c7f3e516de7a1730b8685e6a8015f84832ff0237ed999ca494986f56443b93fcb979a6622bee873650000"]) 00:38:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x40011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={r4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:22 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="f3", 0x1, 0x8}, {&(0x7f00000004c0)="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", 0x1000, 0x401}], 0x0, &(0x7f00000014c0)={[{@resgid={'resgid', 0x3d, r1}}, {@user_xattr='user_xattr'}, {@prjjquota={'prjjquota', 0x3d, 'trusted^cpusetmd5sum-,nodev'}}, {@fsync_mode_strict='fsync_mode=strict'}, {@fastboot='fastboot'}, {@prjquota={'prjquota', 0x3d, '(\'^\x0euserwlan0'}}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@disable_roll_forward='disable_roll_forward'}, {@noinline_data='noinline_data'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash='dont_hash'}, {@uid_lt={'uid<', r2}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x3b, 0x33, 0x67, 0x61, 0x37, 0x76, 0x34], 0x2d, [0x65, 0x0, 0x77, 0x61], 0x2d, [0x63, 0x65, 0x37, 0x32], 0x2d, [0x65, 0x0, 0x0, 0x76], 0x2d, [0x66, 0x34, 0x7f, 0x37, 0x77, 0x66, 0x1d3e3cb7cefd7383, 0x77]}}}]}) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:38:22 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/144) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xbf) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x9428}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@audit='audit'}, {@audit='audit'}]}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x25, 0x0, @tid=r2}, &(0x7f00000002c0)) setresuid(r3, r3, 0x0) setresuid(r3, r3, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0x9, 0x1, 0x1, 0x80000001, 0x4, 0xf8, 0x2, 0x80000001, 0xb2d, 0x5, 0x0, 0x100000001}) fcntl$setstatus(r1, 0x4, 0x0) 00:38:23 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000300)) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffe60) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0xb, [], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/11}, &(0x7f00000001c0)=0x78) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r1, 0x400000000000001) [ 384.034861] binder: BINDER_SET_CONTEXT_MGR already set [ 384.043746] binder: 14497:14500 unknown command 1 [ 384.053971] binder: 14502:14511 unknown command 1 [ 384.053979] binder: 14502:14511 ioctl c0306201 20000580 returned -22 [ 384.060350] binder: 14501:14503 ioctl 40046207 0 returned -16 [ 384.060929] binder: 14501:14503 Acquire 1 refcount change on invalid ref 0 ret -22 [ 384.061332] binder: 14501:14503 Release 1 refcount change on invalid ref 0 ret -22 [ 384.061337] binder: 14501:14503 unknown command 1 [ 384.061345] binder: 14501:14503 ioctl c0306201 20000580 returned -22 [ 384.091937] F2FS-fs (loop1): Invalid SB checksum offset: 3715001856 [ 384.091943] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.092031] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x9c) [ 384.092036] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 384.092071] F2FS-fs (loop1): Invalid SB checksum offset: 3715001856 [ 384.092077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.092083] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x9c) [ 384.092088] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 384.197790] F2FS-fs (loop1): Invalid SB checksum offset: 3715001856 [ 384.197796] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.197876] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x9c) 00:38:23 executing program 5: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a, &(0x7f0000000280)=[{&(0x7f0000000500)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x40000) tee(r0, r0, 0xbe8, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create(0x9) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000140)={0xa, 0x5, {0x57, 0x7, 0x7, {0xfffffffffffffffb, 0xaf4f}, {0x10000000000000, 0x6}, @cond=[{0x2, 0x9, 0x1, 0xfff, 0x7fffffff, 0x36}, {0x1, 0x80000001, 0x40, 0x6, 0xc529}]}, {0x54, 0x8, 0x1ff, {0x4, 0x4}, {0x5, 0x3}, @cond=[{0x0, 0x2, 0x100000000, 0x200, 0x100000001, 0x3}, {0x4, 0x7ff, 0x2, 0x100, 0x3, 0x101}]}}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x8e00, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000000c0)={0x45b, 0x4}) 00:38:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:23 executing program 0: lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740002e2740002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x181800) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000200)="1809400b140a2a54686d02554b01947bd54ccb0bf20f8362c741de65f6f450da2267be9ace4d3c3e7114d18f7b7a0929b2cc61bcf0e6cfa10f78cbb659a597e849055b25ddcb8e7e821b398ce42017340ecb16a528d855c0863b3d5169c7417a7ad5f4d11d29905e7530af818fc16272c92ce22911bf21ecf4e6e869b586ac2f3c1a468311c969537b") write$P9_RCLUNK(r0, &(0x7f00000001c0)={0x7, 0x79, 0x1}, 0x7) 00:38:23 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000300)) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffe60) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0xb, [], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/11}, &(0x7f00000001c0)=0x78) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r1, 0x400000000000001) 00:38:23 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xca6, 0x101, 0x400, 0x81, 0x24}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="660600", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0487d14f73e90801"]) [ 384.197880] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 384.197913] F2FS-fs (loop1): Invalid SB checksum offset: 3715001856 [ 384.197918] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.197925] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x9c) [ 384.197929] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 384.285081] binder: 14497:14500 ioctl c0306201 20000580 returned -22 00:38:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in6=@ipv4={[], [], @local}}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:23 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x8f6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x75, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'veth1_to_bond\x00', 0x6}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x40, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 384.295221] binder: 14538:14539 Release 1 refcount change on invalid ref 0 ret -22 [ 384.308659] binder: 14538:14539 unknown command 1 [ 384.317610] FAT-fs (loop0): bogus sectors per cluster 226 [ 384.317616] FAT-fs (loop0): Can't find a valid FAT filesystem 00:38:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 384.342330] binder: 14538:14539 ioctl c0306201 20000580 returned -22 00:38:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') write$nbd(r0, &(0x7f00000006c0)={0x67446698, 0x0, 0x1, 0x4, 0x1, "70e620a7411b3c1b08f8310730802479f31398b566c9fd453de5462e0ea84746952d7ce40b1c0b349fb1eb02254b815f892b10a14729dbe2ed9b6daa0dd3e7e43f545a52d3c31a17ed4f47d0d9442fdb6d09d1015b65d6b11e777a5870c388238f21d3d1af432a316e3b31d02f576305234ac6"}, 0x83) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0xe) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000180)="d8c29914a3a61c08d463decd748819a3a1fa882d6dc2ed407b5877bf116e6b94b229f2f910cbf6303cbc8e171d30904739a0c218e80185f946ea490610773093cda69b5f566fa20ed5d91d88402ed9027f2850efdd3174fbe6f994345d916cfa59155da45540f31b61362d0b8896b2910d17f18355e0d2baaee650ddc391ca69") ptrace$setregs(0xf, r2, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200000, 0x0) 00:38:23 executing program 5: write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28}, 0x10) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x5c33}, 0xe3c7) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) [ 384.383053] binder: 14552:14554 unknown command 1 [ 384.385365] binder: 14557:14561 Release 1 refcount change on invalid ref 0 ret -22 [ 384.385371] binder: 14557:14561 unknown command 1 [ 384.385378] binder: 14557:14561 ioctl c0306201 20000580 returned -22 [ 384.423600] binder: 14552:14554 ioctl c0306201 20000580 returned -22 00:38:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:23 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x78, 0x3, {"40ced91c1c4366fdf4c0bcc2f65ae9dc2d18b130c8a904a707ee553c580746c75a9c65250d143abbd9d18859e861a0b0dc27211f210c175c859ece558506b53499be03a764f6b97ca4ac4fcb464a5643e3f4995eeb0604998c458b04b99bd7"}}, {0x0, "7760c933f6c5e4c41ba3682b79904558c53dcc80a9e89b4465f83ab08722995cc6c90a944d4b7ca5fc6f0bba5c27d8e3db3c909e03cf5e7e5fb2b3a1361e86601dd385e1dc0548d9ba3d016187fb9685ea59de7d7d8dda54281fbaafa3af5b88b72b2814bc239452a98302c06ae4850a992f65ed0718e15a9a06993a9668ac54b1da06d0eec8bfc7cac214166680911024641fda85a53eee1ac50dec7a5de1f77ce27ba9f34715f8818a5a3d04697856a5924f5a454010365ed1443f27550e8ef0cedd33b5aa283c66404ec9ecae0a5dabaf281ab7c4329ad19fc1f448fe53dc98eb789e68fb7ef992e20dc444fa52d0"}}, &(0x7f00000001c0)=""/209, 0x16a, 0xd1, 0x1}, 0x20) readahead(r0, 0x100000000, 0x4) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) iopl(0x8d) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 00:38:23 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x27) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x14) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0x20, 0xc7}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 00:38:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x161, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x8a, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 384.444974] FAT-fs (loop0): bogus sectors per cluster 226 [ 384.444979] FAT-fs (loop0): Can't find a valid FAT filesystem [ 384.458795] binder: 14570:14579 Release 1 refcount change on invalid ref 0 ret -22 [ 384.458801] binder: 14570:14579 unknown command 1 [ 384.458810] binder: 14570:14579 ioctl c0306201 20000580 returned -22 00:38:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = geteuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f00000001c0)='fuse\x00', 0x200400, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1d61224092477d40}}, {@allow_other='allow_other'}], [{@euid_eq={'euid', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}, {@dont_hash='dont_hash'}]}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) listxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=""/50, 0x32) 00:38:23 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x10200000006, 0x0, 0x0, 0x7ff00000}]}) prctl$PR_CAP_AMBIENT(0x2f, 0x5, 0x21) [ 384.538417] binder: 14582:14584 Release 1 refcount change on invalid ref 0 ret -22 [ 384.557066] binder: 14582:14584 unknown command 1 [ 384.572732] binder: 14582:14584 ioctl c0306201 20000580 returned -22 00:38:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:23 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$KDDISABIO(r0, 0x4b37) [ 384.592284] audit: type=1400 audit(1552437503.517:45): avc: denied { dyntransition } for pid=14588 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0 tclass=process permissive=1 00:38:23 executing program 2: prctl$PR_GET_UNALIGN(0x5, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8000000000000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r1, r2, 0x0, 0x80000001) 00:38:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 384.592429] binder: BINDER_SET_CONTEXT_MGR already set [ 384.592437] binder: 14585:14597 ioctl 40046207 0 returned -16 00:38:23 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="66643da90ab4d0389774603e2a078732e27560b1499e769aa982f636f9b67d4cd8f0b2e90072b0936e84a9d576ed16dbc41d4a2b7dd313128452a3517e456b4959fa33146cf5e0ab3816ee9244033e75da9d8049f3456e14cd6c3a733f62e9a0d191d3280c1928c80a26a5eeb0245df8cfb5359a0f87c802cc91ef1439ab4fbbfa3ab6972a3afb47b981f52b2c3b865db51a6e60949b1e651116e2b99c35b08f339cb2af7aba00db015f0514fe94a7753ae548bcd4823c9353b5bb71f058f98a", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2ce0"]) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x1, @thr={&(0x7f0000000340)="1d2cf0d7d7607aa54d541f72603d98136eb32144f354eb0a2f60b9ff8e8a1bb342b21fc9e7f3fbeb1cbcc72e22167d569c6fddbc0c453933297f591638f9dc1b7335904fd1c0", &(0x7f00000003c0)="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"}}, &(0x7f0000000080)=0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000680)={0x2f, 0x6, 0x0, {0x5, 0x0, 0x6, 0x0, 'wlan0%'}}, 0x2f) write$P9_RCREATE(r1, &(0x7f0000000640)={0x18, 0x73, 0x2, {{0x4e, 0x1, 0x4}, 0x2}}, 0x18) timer_gettime(r3, &(0x7f0000000100)) [ 384.594671] binder: 14585:14597 unknown command 0 [ 384.594678] binder: 14585:14597 ioctl c0306201 20000040 returned -22 [ 384.598667] binder: 14585:14597 ioctl 4c82 0 returned -22 [ 384.598717] binder: 14585:14597 ioctl 4c81 0 returned -22 [ 384.601056] binder: 14585:14597 unknown command 1 [ 384.601064] binder: 14585:14597 ioctl c0306201 20000580 returned -22 [ 384.640395] binder: BINDER_SET_CONTEXT_MGR already set [ 384.640401] binder: 14604:14606 ioctl 40046207 0 returned -16 [ 384.646365] binder: 14604:14606 unknown command 1 [ 384.646374] binder: 14604:14606 ioctl c0306201 20000580 returned -22 [ 384.692169] binder: BINDER_SET_CONTEXT_MGR already set [ 384.692177] binder: 14609:14613 ioctl 40046207 0 returned -16 [ 384.720020] binder: 14609:14613 unknown command 1 [ 384.720028] binder: 14609:14613 ioctl c0306201 20000580 returned -22 00:38:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a83fb5ab"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = accept4(r0, &(0x7f0000000b00)=@hci, &(0x7f0000000b80)=0x80, 0x800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000c00)='team\x00') getpeername$packet(0xffffffffffffff9c, &(0x7f0000000c40)={0x11, 0x0, 0x0}, &(0x7f0000000c80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000f80)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) recvmsg(r0, &(0x7f000000a400)={&(0x7f0000009e80)=@can={0x1d, 0x0}, 0x80, &(0x7f000000a380)=[{&(0x7f0000009f00)=""/60, 0x3c}, {&(0x7f0000009f40)=""/201, 0xc9}, {&(0x7f000000a040)=""/197, 0xc5}, {&(0x7f000000a140)=""/134, 0x86}, {&(0x7f000000a200)=""/166, 0xa6}, {&(0x7f000000a2c0)=""/182, 0xb6}], 0x6}, 0x100) getpeername$packet(0xffffffffffffffff, &(0x7f000000a440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a480)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a4c0)={'gre0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f000000a500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000a540)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f000000a580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a5c0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f000000a600)={@local, @broadcast, 0x0}, &(0x7f000000a640)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f000000d6c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000d700)=0x14, 0x800) getpeername$packet(r0, &(0x7f000000d740)={0x11, 0x0, 0x0}, &(0x7f000000d780)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f000000d800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000d840)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000000d880)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@loopback}}, &(0x7f000000d980)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000da00)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f000000db00)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f000000dc00)={@mcast1, 0x0}, &(0x7f000000dc40)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f000000dd40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000dd80)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f000000ddc0)={@dev, 0x0}, &(0x7f000000de00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000df00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000df40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f000000df80)={@rand_addr, @rand_addr, 0x0}, &(0x7f000000dfc0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000e000)={0x0, @remote, @loopback}, &(0x7f000000e040)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000000e180)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f000000e280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000e380)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f000000e480)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f000000ed80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000ed40)={&(0x7f000000e4c0)={0x878, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x174, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x41}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x2a8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x13d2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x8, 0x6, 0x7, 0x7}, {0xfffffffffffffff7, 0x0, 0x2, 0xfffffffffffffffa}, {0x40, 0x200, 0x8001, 0x5}, {0x8, 0xffff, 0xff, 0x8}, {0x3, 0x1, 0xab, 0x100}, {0xffffffffffffffc1, 0x0, 0x3ff, 0x3}, {0x240000, 0x4, 0x2, 0xd2a6}, {0xbb, 0x0, 0x5b45}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x20, 0x0, 0x1, 0x401}, {0x274bc00000, 0x401, 0x2, 0x4}, {0x8, 0x2, 0xc7, 0x8}, {0x3, 0x100000000, 0xffff, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0xffff, 0x1ff, 0x8000, 0x43}, {0x9, 0x8001, 0x4, 0x9}, {0x7, 0xc41, 0xfffffffffffff918, 0x5d}, {0x800, 0x9, 0x27b, 0x101}, {0x9, 0x758, 0x1}, {0x9, 0x9, 0x9, 0x5}, {0x0, 0x7, 0x296dcc58, 0x10000}, {0x1, 0x3, 0x1, 0x4}, {0x8000000000, 0x2, 0x6, 0x4}]}}}]}}, {{0x8, 0x1, r18}, {0x16c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x32c}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r21}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x95}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4ad30a51}}}]}}, {{0x8, 0x1, r22}, {0x128, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xd68}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) r25 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r25, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r26 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r26, &(0x7f0000000940)={&(0x7f0000000040)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000280)=""/147, 0x93}, {&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/11, 0xb}, {&(0x7f0000000700)=""/41, 0x29}, {&(0x7f0000000740)=""/248, 0xf8}], 0xa, &(0x7f0000000900)=""/13, 0xd}, 0x40000003) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000a80)=0xe8) sendmsg$nl_xfrm(r26, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000d00)=@getsa={0x238, 0x12, 0x20, 0x70bd2c, 0x25dfdbfd, {@in6=@remote, 0x4d3, 0x2, 0x3f}, [@algo_aead={0x12c, 0x12, {{'morus1280\x00'}, 0x700, 0x40, "ea6916550f93511902a2a118dfe6cb71816b66c91aa7833a3c3f966a4ff2da4da2fef062e360ea48fe37e1a5b47fc057265868398bd569fdf5055b9667a739c8995fbb3ba039b729081b78f856ef95b98606468fd8d10f3172fadf0297f53070508aa628ddb040d055f8daf5de59d9c9b21ddb3e8875d484277776678e25c0ed6b5cdb1789f3c90c2418b2baba3a58ac598b30f2a31df3fa5b39da45f3a0f76cb2d03861d0704e86ee08d8dfbcaa8c6b351ed97fd95a65294d344c868fa2b7ca4bb5874cf7b9f27cee7df326c1572bedbddafcf4a5e7e8d69df7dd2a5260a719"}}, @output_mark={0x8, 0x1d, 0x10000}, @tfcpad={0x8, 0x16, 0x2}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x25}}, @ipv6_hthresh={0x8, 0x4, {0x1a, 0x74}}, @policy={0xac, 0x7, {{@in=@multicast2, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x8, 0xa, 0x20, 0xa0, 0x8, r27, r28}, {0x3, 0x100000000, 0x10001, 0x80000000, 0x2, 0x4, 0x0, 0xcf7}, {0x6, 0x3ff, 0x9c, 0x1ff}, 0x1, 0x6e6bbf, 0x1, 0x1, 0x3, 0x1}}, @policy_type={0xc}]}, 0xffffffffffffff2c}, 0x1, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r25, 0x29, 0x20, &(0x7f0000000ac0)={@empty, 0xd1, 0x1, 0x3, 0x4, 0x8, 0x1}, 0x20) setsockopt$inet6_opts(r25, 0x29, 0x35, &(0x7f00000000c0)=@srh={0x0, 0x2, 0x2}, 0x18) 00:38:24 executing program 5: write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28}, 0x10) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x5c33}, 0xe3c7) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 00:38:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 385.326948] binder: 14632:14636 unknown command -1414185048 [ 385.327417] binder: BINDER_SET_CONTEXT_MGR already set [ 385.327424] binder: 14630:14635 ioctl 40046207 0 returned -16 00:38:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 385.334009] binder: 14630:14635 Release 1 refcount change on invalid ref 0 ret -22 [ 385.334020] binder: 14630:14635 unknown command 1 [ 385.334053] binder: 14630:14635 ioctl c0306201 20000580 returned -22 00:38:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) [ 385.378870] binder: 14632:14642 Release 1 refcount change on invalid ref 0 ret -22 [ 385.378881] binder: 14632:14642 unknown command 1 00:38:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 385.378900] binder: 14632:14642 ioctl c0306201 20000580 returned -22 [ 385.389134] binder: 14640:14641 Release 1 refcount change on invalid ref 0 ret -22 [ 385.389140] binder: 14640:14641 unknown command 1 [ 385.389149] binder: 14640:14641 ioctl c0306201 20000580 returned -22 [ 385.438297] binder: 14645:14648 Release 1 refcount change on invalid ref 0 ret -22 [ 385.438303] binder: 14645:14648 unknown command 1 [ 385.438311] binder: 14645:14648 ioctl c0306201 20000580 returned -22 [ 385.521491] binder: 14655:14659 unknown command 1 [ 385.521500] binder: 14655:14659 ioctl c0306201 20000580 returned -22 [ 385.547397] binder: 14663:14664 unknown command 1 [ 385.547405] binder: 14663:14664 ioctl c0306201 20000580 returned -22 [ 385.677785] binder: 14632:14636 ioctl c0306201 200000c0 returned -22 00:38:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000080)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) 00:38:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:25 executing program 0: mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000080)='\x00', 0x2) listen(r0, 0x4) 00:38:25 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20c10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, r1, 0x308, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf6f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x923}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x1) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0) 00:38:25 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mlockall(0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4000000, 0xc}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:38:25 executing program 0: getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xfd29) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="9fcfda7a5a7452cdaca2e72f96d978ae0c26e3265eda8cd232aab9a5976bd28ce11dd937a70dae2435ab83097d984829250741010fb1f047bf9870ee4e4211967b55d2", 0x43, 0x100000001}, {&(0x7f0000000100)="c7bc4674efa8e4cff062970a16dfbce75d533434b15563900adaeb42613bd6fb03251a8ebb63983d513b396e7958b32b2d9dfc431aa43a20a9", 0x39, 0x9}], 0x10000, &(0x7f0000000380)={[{@utf8='utf8=1'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_winnt='shortname=winnt'}, {@shortname_mixed='shortname=mixed'}], [{@euid_gt={'euid>', r0}}, {@uid_gt={'uid>', r1}}, {@smackfshat={'smackfshat'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@subj_user={'subj_user', 0x3d, 'vmnet0GPL'}}]}) 00:38:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000600)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f0000000680)={0x0, 0x0, 0x1, 0x40, 0x0, 0xba8}) lchown(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) fchown(r2, 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x96ae, 0x9, 0xb5, &(0x7f0000000340)="741a8f96bff0ae1b00baebbe82a82d4c92ca840e71e5f377cc07e253ad8f9f3c9e0a6d1d43eccef7280c70736763d001074f21f4868bcee1ff9e155d00b215700d7118e6449a5796c55e7951aa528b94a7f5ee8c943e2bc6ecc60fbcd74410959f3a51b84c5137a8e577b5bc1ee3081653e42cae1eefef1de368b4ef1b1d58564285e389f9a3f03a6a6e04a7177c3d71a37aa42d5cd0fa773a51409bd2cd01573094342b086acf1ef2170ba8c66e2dccc18cd0874b"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r4, 0x1000008919, &(0x7f0000000040)="0adc1f123c12a41d88b070") r5 = socket(0xd, 0x80803, 0x1f) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x60, r6, 0x100, 0x5, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe05}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xba}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x81]}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) write(r0, &(0x7f0000000500)="0c565e01c462f38322596858ffc21d158d88549047107bbbe392864bc62709cb0a847d9983679f3c5dc3c91269a016c8c5f4e3bf274b29d6f8988cbeb27b2708644a230a496d870fe3c62104cd40e48923f68529c2ee7664c549bcb7000918cf159a23a11f518e40a6b29c59e90290c7643ad430691040b9f44da985cb6efd44d38d03d30a23", 0x86) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) getuid() mknod(&(0x7f00000004c0)='./bus\x00', 0x1000, 0x5) geteuid() ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000700)) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') 00:38:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x39, 0x9, 0xf, 0x12, 0x3, 0x0, 0x0, 0x87, 0xffffffffffffffff}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:25 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f00000000c0)=0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r2, 0x0, 0x0, 0x0) write(r4, &(0x7f00000001c0), 0x10000026f) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) [ 386.369041] binder: 14685:14689 unknown command 1 [ 386.377342] binder: 14682:14693 unknown command 1 00:38:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x80008000000014, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 00:38:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x303, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000440)) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x9) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1810000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x19, 0x3ff, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="066304400000000001593241d5d4172a6ee711880593ff3cafd206550f5066cf8933e03a00ffe8e108057cc3fb5f6afb6c57372146c22a4e76d12f98840e4d6e9139a3523c9fa1c5d613d4b7da524c9422e9f6d72a955b14e8661aa77e9d5811dbbc3ff90bab1386d474fdac85afba1782c8afd1e1b081548a27a6fa2e45e43bb3639e9acf418352ff54b67c46830a7595134a21389e714b5d83c1a6f22d0efe"], 0x0, 0x0, 0x0}) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000400)) [ 386.377351] binder: 14682:14693 ioctl c0306201 20000580 returned -22 [ 386.414993] FAT-fs (loop0): Unrecognized mount option "euid>00000000000000000000" or missing value [ 386.445162] binder: 14713:14715 ioctl 4028700f 20000040 returned -22 [ 386.445478] binder: 14713:14715 unknown command 1 00:38:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 386.445485] binder: 14713:14715 ioctl c0306201 20000580 returned -22 [ 386.469498] binder: 14706:14708 ioctl 401070cd 20000700 returned -22 [ 386.494370] binder: 14722:14725 ioctl 400454de 20000440 returned -22 [ 386.494446] binder: 14722:14725 ioctl 5607 0 returned -22 [ 386.494504] binder: 14722:14725 ioctl 8912 3 returned -22 [ 386.502519] binder: 14706:14708 ioctl 401070cd 20000700 returned -22 [ 386.509760] binder: 14722:14725 ioctl 2400 9 returned -22 [ 386.509876] binder: 14722:14725 unknown command 1093818625 [ 386.509883] binder: 14722:14725 ioctl c0306201 20000580 returned -22 [ 386.509973] binder: 14722:14725 ioctl 541c 20000400 returned -22 [ 386.511549] binder: 14722:14736 ioctl 400454de 20000440 returned -22 [ 386.511606] binder: 14722:14734 ioctl 5607 0 returned -22 [ 386.511626] binder: 14722:14736 ioctl 8912 3 returned -22 [ 386.511823] binder: 14722:14736 ioctl 2400 9 returned -22 [ 386.512035] binder: 14722:14737 unknown command 1093818625 [ 386.512042] binder: 14722:14737 ioctl c0306201 20000580 returned -22 [ 386.550803] binder: 14741:14742 unknown command 1 00:38:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) capset(&(0x7f0000000180)={0x20080522, r1}, &(0x7f00000001c0)={0x2, 0x40, 0xffffffff, 0x7, 0x0, 0xffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r1, 0x2, 0x0, &(0x7f0000000300)) r3 = dup(r2) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000280)=0x2000000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r4, 0x0, &(0x7f0000000200)='y\x00', 0x2, 0x1) bind$inet(r6, 0x0, 0x6a69619d) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000240)) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x750, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @broadcast}, 0x6, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x2200000000001200, 0x6, 0xffffffffffffffff}) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000004c0)) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x33) rename(&(0x7f0000002300)='./file0\x00', &(0x7f0000000580)='\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8) unshare(0x60000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r7, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000001080)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)=0xfffffffffffffffe, 0x129a7cd0cd057fcf) sendmmsg(0xffffffffffffffff, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfd46}, 0xc99}], 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0xf29, 0xfffffffffffffffa}, 0xc) 00:38:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0xffffffffffffdde, 0x0, 0xffffffffffffff5c}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000180)="df0fb74e4b1f438ab544b016fe8690d5306218ab0aafa621f412351dac70461cccf926fa5c86824c8e51265cf5fbc024986102fc5b75dc48b9518cafece5c18e1b6f19c7", 0x44) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x100, 0x1800) setns(0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) 00:38:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 386.550811] binder: 14741:14742 ioctl c0306201 20000580 returned -22 [ 386.662132] binder: 14685:14689 ioctl c0306201 20000580 returned -22 [ 386.701398] binder: BINDER_SET_CONTEXT_MGR already set [ 386.707267] binder: 14749:14756 unknown command 4 [ 386.707284] binder: 14749:14756 ioctl c0306201 200000c0 returned -22 [ 386.713099] binder: 14749:14756 Release 1 refcount change on invalid ref 0 ret -22 [ 386.713105] binder: 14749:14756 unknown command 1 [ 386.713112] binder: 14749:14756 ioctl c0306201 20000580 returned -22 [ 386.757730] binder: 14752:14759 Release 1 refcount change on invalid ref 0 ret -22 [ 386.757736] binder: 14752:14759 unknown command 1 [ 386.757744] binder: 14752:14759 ioctl c0306201 20000580 returned -22 [ 386.783475] binder: 14752:14757 ioctl 40046207 0 returned -16 00:38:28 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mlockall(0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4000000, 0xc}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:38:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0) r2 = gettid() open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) tkill(r2, 0x16) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x2, 0x1b2010, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:28 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xfd30, 0x0) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000200)=""/4096) r1 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x36) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x100000000c, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) memfd_create(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="200000002200000327bd7000fddbdf250a1414010100000007ff00000b0001006a7bc185101de7314ab2d8af1af67538b0e80f8637b37471d2737164ec00519b5e73ff3510e1ed582ee232e1523d"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 00:38:28 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) fcntl$setsig(r0, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x40) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000540)="352a4c23aa9308a2911c5f340ca4d09107d5bea6b2be66cd8f537436301d7cbdf9185133d51a7efb6dd65e5b620bbdf3b4f0a7ddb56377bb90a40ffe8615eaa4ccbcdfc1a8cc6fa65b793cf2ce1ccb635cdc7736e02f6d3254d627eed21731197fa64a7937506bb29a1b1694d260583d90445edab62ac9e0f1b43e29492f020aa70da9e00d12bd582df80951167517fbd4f5d1", 0x0}, 0x18) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffdad, &(0x7f00000001c0)}, 0xfd) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) open(0x0, 0x0, 0x0) open(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) 00:38:28 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) io_setup(0x3f, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x6, {{0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, [], 0x17}, 0x8}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x1ff, @empty, 0x8000}}, {{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80, @remote, 0x8001}}]}, 0x210) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e21, @local}, {0x2, 0x4e23}, 0x40, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='erspan0\x00', 0x10000, 0x80000001, 0x8e}) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='./bus\x00', 0x7, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="56878e057aae766b334544d2888cacabf709b9fcdad8a53b8d734c077a2f0b52fbe8c8f3b28e097e8f09d4974a4b31de8f58bc50e9bb3b1061236a70efde10cd4a91cc318f0dfa3a2d62b30d", 0x4c, 0x5}], 0x102400, 0x0) 00:38:28 executing program 3: dup(0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 389.386599] binder: 14769:14778 unknown command 0 00:38:28 executing program 3: dup(0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:28 executing program 3: dup(0xffffffffffffffff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 389.387285] binder: 14772:14780 unknown command 1 [ 389.387292] binder: 14772:14780 ioctl c0306201 20000580 returned -22 [ 389.444158] binder: 14769:14778 ioctl c0306201 200000c0 returned -22 00:38:28 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:28 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:28 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 389.594955] binder: 14769:14778 Release 1 refcount change on invalid ref 0 ret -22 [ 389.607328] binder: 14769:14778 unknown command 1 [ 389.618805] binder: 14769:14778 ioctl c0306201 20000580 returned -22 00:38:31 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mlockall(0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4000000, 0xc}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:38:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ptrace$setregs(0xffffffffffffffff, r1, 0x7fffffff, &(0x7f00000002c0)="7244ecc018b11e6dfbecf4572abd7dc368c2f005703c8da21e35ae4f9b8349604675d6088c53247d5af58a04f9f7642558286676ebb3b70c231a9607fd6b306ab5e6a15dba349e680fe6a38f1f611d3d3107998852f6387ebeab906f28a5a5ca1bd484ffad1a27c77afec31f31bb18b18b68b4823dd763b8fc2970e975868e71dc5f14dac3588a8cef8366c3bcab253b3174b38fd9b2582feeaeb3f47c132215242d432b70d2a4d3cab73ba96f92d384bb57d26b8b73c9cb32ef81ddbf9543011f68c31e5583ac9e3ee1ec8f90cc3e7005e18bbaf0d27aba66649caddb") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x101) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000000000000002"], 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast2, 0x4e20, 0x3fffffffc000, 0x4e24, 0x0, 0x0, 0xa0, 0x20, 0x84, 0x0, r5}, {0xffffffffffffff5b, 0x9, 0x4, 0x9c, 0x5, 0x6f, 0x8000, 0x7}, {0x7, 0x2, 0x1, 0x1000}, 0xfff, 0x6e6bbf, 0x3, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d3, 0xff}, 0xa, @in6=@remote, 0x3506, 0x3, 0x3, 0x2, 0x683, 0x3, 0x5}}, 0xe8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 00:38:31 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000052, 0x10102, &(0x7f0000001540)={0x0, r1+10000000}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 00:38:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/relabel\x00', 0x2, 0x0) close(r1) 00:38:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x11) sendto$inet(r0, 0x0, 0xffffffe3, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff9a, 0x4007ffd, 0x0, 0xb4) recvfrom(r0, 0x0, 0x0, 0x45, 0x0, 0x0) 00:38:31 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) close(r0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x0, @initdev, 0x0, 0x0, 'lblc\x00'}}, 0x44) 00:38:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b70200001a4b0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001030000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="7a64f6bfff9c6ca28be45c3904ff", 0x0, 0x101}, 0x28) 00:38:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) [ 392.395968] binder: 14828:14832 ioctl 2403 101 returned -22 [ 392.414315] binder: 14823:14833 Acquire 1 refcount change on invalid ref 0 ret -22 00:38:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000000008000000100004000c00010073aaaf87dc8a869d"], 0x1}}, 0x0) [ 392.416888] binder: 14823:14833 Release 1 refcount change on invalid ref 0 ret -22 [ 392.416895] binder: 14823:14833 unknown command 1 [ 392.416904] binder: 14823:14833 ioctl c0306201 20000580 returned -22 [ 392.445338] binder: 14843:14845 Acquire 1 refcount change on invalid ref 0 ret -22 [ 392.449254] binder: 14843:14845 Release 1 refcount change on invalid ref 0 ret -22 [ 392.449261] binder: 14843:14845 unknown command 1 [ 392.449269] binder: 14843:14845 ioctl c0306201 20000580 returned -22 [ 392.451755] binder: 14828:14847 unknown command 6 [ 392.451765] binder: 14828:14847 ioctl c0306201 20000580 returned -22 [ 392.451981] binder: 14828:14847 ioctl 6612 0 returned -22 [ 392.474956] binder: 14853:14855 Acquire 1 refcount change on invalid ref 0 ret -22 [ 392.476467] binder: 14853:14855 Release 1 refcount change on invalid ref 0 ret -22 [ 392.476474] binder: 14853:14855 unknown command 1 [ 392.476483] binder: 14853:14855 ioctl c0306201 20000580 returned -22 [ 392.502671] binder: 14857:14859 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 392.625903] binder: 14828:14847 ioctl 2403 101 returned -22 [ 392.632028] binder: 14828:14847 unknown command 6 [ 392.637198] binder: 14828:14847 ioctl c0306201 20000580 returned -22 00:38:34 executing program 1: 00:38:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 5: 00:38:34 executing program 2: 00:38:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$KDSETMODE(r2, 0x4b3a, 0x401) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 0: 00:38:34 executing program 5: 00:38:34 executing program 2: 00:38:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="f7db1f123c123f3188b070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x72, 0xa, 0xffdc}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 00:38:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x2) 00:38:34 executing program 5: socketpair(0xb, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000240)='em1selinuxsystemppp1self\x00', 0x19, 0x3) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) [ 395.414256] binder: 14872:14876 ioctl 4b3a 401 returned -22 [ 395.432041] binder: 14870:14875 Release 1 refcount change on invalid ref 0 ret -22 00:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) [ 395.432046] binder: 14870:14875 unknown command 1 00:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) [ 395.432053] binder: 14870:14875 ioctl c0306201 20000580 returned -22 [ 395.469361] binder: 14872:14886 unknown command 1 [ 395.469370] binder: 14872:14886 ioctl c0306201 20000580 returned -22 [ 395.476854] binder: 14882:14889 Release 1 refcount change on invalid ref 0 ret -22 [ 395.476861] binder: 14882:14889 unknown command 1 [ 395.476869] binder: 14882:14889 ioctl c0306201 20000580 returned -22 [ 395.533856] binder: 14897:14905 BC_FREE_BUFFER u0000000000000000 no match [ 395.537516] binder: 14899:14907 Release 1 refcount change on invalid ref 0 ret -22 [ 395.537521] binder: 14899:14907 unknown command 1 00:38:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KDADDIO(r2, 0x4b34, 0x8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x2000, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000180)={0x20, 0xfffffffffffffffe, 0x3, {0x100000001, 0x0, 0x7, 0x1000}}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0663044000000000f2"], 0x0, 0x0, 0x0}) write$FUSE_OPEN(r3, &(0x7f0000000140)={0x20, 0xfffffffffffffffe, 0x2, {0x0, 0x7}}, 0x20) 00:38:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:34 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) fcntl$setsig(r0, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x40) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000540)="352a4c23aa9308a2911c5f340ca4d09107d5bea6b2be66cd8f537436301d7cbdf9185133d51a7efb6dd65e5b620bbdf3b4f0a7ddb56377bb90a40ffe8615eaa4ccbcdfc1a8cc6fa65b793cf2ce1ccb635cdc7736e02f6d3254d627eed21731197fa64a7937506bb29a1b1694d260583d90445edab62ac9e0f1b43e29492f020aa70da9e00d12bd582df80951167517fbd4f5d1", 0x0}, 0x18) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffdad, &(0x7f00000001c0)}, 0xfd) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) open(0x0, 0x0, 0x0) open(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) 00:38:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0) r2 = gettid() open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) execve(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) tkill(r2, 0x16) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x2, 0x1b2010, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 395.537528] binder: 14899:14907 ioctl c0306201 20000580 returned -22 [ 395.557279] binder: 14895:14903 Acquire 1 refcount change on invalid ref 0 ret -22 [ 395.557975] binder: 14895:14903 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 395.577181] binder: 14911:14916 BC_FREE_BUFFER u0000000000000000 no match 00:38:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) [ 395.681646] binder: 14930:14932 unknown command 0 00:38:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}]}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) r2 = creat(&(0x7f0000000780)='./file1\x00', 0x180) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000007c0)={0xffffffffffff8001, 0x1000, "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"}) lstat(&(0x7f0000000400)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000005c0)=0xe8) r5 = signalfd4(r0, &(0x7f0000001800)={0xfff}, 0x8, 0x800) r6 = getgid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001840)="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") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vga_arbiter\x00', 0x201, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x1}, [{0x2, 0x4, r1}, {0x2, 0x7, r3}, {0x2, 0x2, r4}], {0x4, 0x4}, [{0x8, 0x3, r6}, {0x8, 0x4, r7}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0x2) 00:38:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 395.688103] binder: BINDER_SET_CONTEXT_MGR already set [ 395.688111] binder: 14929:14934 ioctl 40046207 0 returned -16 00:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000002a15fff029d2cb17731b63f3a1d8f9c851ed022abda7b6af07be7cebaf3abaaf7e28d4207271c380003790ed4052c59669588372efc57ac40d17a98c2158eb57d83eb333e07a497031b77fd79ec66ad57a651ec10b2b560341128abdbbfc45eda0e74d2d7c"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) [ 395.688151] binder: 14927:14933 ioctl c0306201 0 returned -14 [ 395.688745] binder: 14927:14933 Release 1 refcount change on invalid ref 0 ret -22 [ 395.688750] binder: 14927:14933 unknown command 1 [ 395.688757] binder: 14927:14933 ioctl c0306201 20000580 returned -22 [ 395.688893] binder: 14925:14935 unknown command 1 [ 395.688900] binder: 14925:14935 ioctl c0306201 20000580 returned -22 [ 395.694964] binder: 14929:14934 BC_FREE_BUFFER u0000000000000000 no match [ 395.699468] binder: BINDER_SET_CONTEXT_MGR already set [ 395.699567] binder: 14931:14937 ioctl 40046207 0 returned -16 [ 395.708455] binder: 14931:14937 unknown command 242 [ 395.708464] binder: 14931:14937 ioctl c0306201 20000580 returned -22 [ 395.728039] binder: BINDER_SET_CONTEXT_MGR already set [ 395.728047] binder: 14941:14945 ioctl 40046207 0 returned -16 [ 395.730646] binder: 14941:14945 BC_FREE_BUFFER u0000000000000000 no match [ 395.733471] binder: 14940:14944 ioctl c0306201 0 returned -14 [ 395.734006] binder: 14940:14944 Release 1 refcount change on invalid ref 0 ret -22 [ 395.734011] binder: 14940:14944 unknown command 1 [ 395.734018] binder: 14940:14944 ioctl c0306201 20000580 returned -22 [ 395.773056] binder: 14950:14955 ioctl c0306201 0 returned -14 [ 395.773683] binder: 14950:14955 Release 1 refcount change on invalid ref 0 ret -22 [ 395.773689] binder: 14950:14955 unknown command 1 [ 395.773696] binder: 14950:14955 ioctl c0306201 20000580 returned -22 [ 395.777220] binder: 14951:14956 BC_FREE_BUFFER u0000000000000000 no match [ 395.780467] binder: 14947:14957 Release 1 refcount change on invalid ref 0 ret -22 [ 395.780473] binder: 14947:14957 unknown command 1 [ 395.780481] binder: 14947:14957 ioctl c0306201 20000580 returned -22 [ 395.820245] binder: BINDER_SET_CONTEXT_MGR already set [ 395.820253] binder: 14963:14966 ioctl 40046207 0 returned -16 [ 395.820876] binder: 14963:14966 unknown command 0 [ 395.820883] binder: 14963:14966 ioctl c0306201 200000c0 returned -22 [ 395.822144] binder: 14959:14965 Release 1 refcount change on invalid ref 0 ret -22 [ 395.822149] binder: 14959:14965 unknown command 1 [ 395.822155] binder: 14959:14965 ioctl c0306201 20000580 returned -22 [ 395.822618] binder: 14963:14966 Release 1 refcount change on invalid ref 0 ret -22 [ 395.822624] binder: 14963:14966 unknown command 1 [ 395.822631] binder: 14963:14966 ioctl c0306201 20000580 returned -22 [ 395.825342] binder: 14961:14964 BC_FREE_BUFFER u0000000000000000 no match [ 395.861684] binder: 14969:14971 BC_FREE_BUFFER u0000000000000000 no match [ 395.981487] binder: 14930:14946 Release 1 refcount change on invalid ref 0 ret -22 [ 395.981492] binder: 14930:14946 unknown command 1 [ 395.981499] binder: 14930:14946 ioctl c0306201 20000580 returned -22 [ 396.134589] binder: 14930:14932 ioctl c0306201 200000c0 returned -22 00:38:35 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x800, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) keyctl$setperm(0x5, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$TIOCNXCL(r2, 0x540d) 00:38:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x7ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05040040"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x2db, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000004014660cf511850e0f6d8fe6920cf275ed990d4f5a24607852d85aa519bb9067cbe8fb6774e609d897ee3ce9c2cae8f91f2dba7b6a71b03a47e73db1a42beb90a3b5e52bba4bb45a6501621368abb1bd7bce783a91adc48106a76bd96"], 0x0, 0x0, 0x0}) 00:38:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) [ 396.513126] binder: 14980:14982 BC_FREE_BUFFER u0000000000000000 no match [ 396.521492] binder: 14978:14983 Release 1 refcount change on invalid ref 0 ret -22 [ 396.521498] binder: 14978:14983 unknown command 1 [ 396.521505] binder: 14978:14983 ioctl c0306201 20000580 returned -22 [ 396.535395] binder: 14979:14984 unknown command 0 [ 396.535405] binder: 14979:14984 ioctl c0306201 20000580 returned -22 00:38:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r2}) 00:38:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500140e2469f6ade6647c64c07324c94092062000c42103a8"], 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/107, 0x6b) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) gettid() mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="4663040000000100002a678aed16ae88b7ee70ee784b8fa5a9d90228c5ef926ec0b5e3f7dbd87c3408123c4babab7e6d8456f564c9da941b2d1ea2b0455b0130b1cf866709c50fda141865127203f30aa7b1ba26a45877a357cf08596a7942cd331d37b5e896066fd5e44081fb0fc7c77b5d81e304d545930bc2525e2606a231b7177d274ab83f506e58de660239e7a10c6e476da57ad23e"], 0x0, 0x0, 0x0}) 00:38:35 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x800, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x182) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000200)={0xb5f, 0x9436, 0x0, 0x6}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x7f) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @local}, 0x1c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000000c0)=0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$addseals(r0, 0x409, 0x2) recvfrom$inet6(r4, &(0x7f00000001c0)=""/31, 0x1f, 0x100, &(0x7f0000001880), 0x1c) prctl$PR_SET_FPEXC(0xc, 0x120003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 00:38:35 executing program 1: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x22, &(0x7f0000000100)={0x1, 0x20000020000, 0x40}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1e0630b0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400100, 0x81) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1e, &(0x7f0000000180)="3f9be151bbb2bf9589820288f5c719c235f9f7adbd0e9c741b2d84fe29dc009625", 0x21) r3 = open(&(0x7f0000000300)='./file0\x00', 0x200000, 0x100) getsockopt$inet6_tcp_buf(r2, 0x6, 0x2f, &(0x7f0000000040)=""/69, &(0x7f00000000c0)=0x45) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000340)={@multicast1, @empty, @remote}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000140)={@broadcast, @remote, @broadcast}, 0xc) 00:38:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:35 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001040)="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") read$FUSE(r0, &(0x7f0000000040), 0x1000) write$UHID_CREATE(r0, 0x0, 0x0) 00:38:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 396.671507] binder: 15002:15006 BC_FREE_BUFFER u0000000000000000 no match 00:38:35 executing program 4: io_setup(0x3, &(0x7f0000000200)) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x304, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x8000) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="f4", 0x1) recvmmsg(r2, &(0x7f0000000180), 0x400000000000264, 0x0, 0x0) inotify_init() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) write(r4, &(0x7f0000000380)="58e846071d18924301418137264d8c6ddc7fb10b77f61b0d819c0a697927385456da5b97a38f0ea2d6bbec2e96d904dfd13856c1a947396f064e11ec6255d1be9109a2ed65fe1bfe0c31a55a57d3ab0d788fe2bd022631b89c3af31867c5d86b40514b67dc958bc1bb3f2da0a2bb0d0000d600000000000000", 0x79) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x100010, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) ioctl$KDENABIO(r3, 0x4b36) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000400)="289b0ea60751322daf0ff5fcba044c6ea13bf2972581f0fc67ff3180b50e5573ed038ebaf07fc4c1a6cf7d26e266d25205212f6e818d59f5aebd667fe4fa91e67ce67a02a9ac9994b4d9787088787a433bbfc9921a20482c9bfecdc318104f13e694d854fa4d3134fef072a2c35c3758dd5ad9af884a6ca4e95efab9e9613e4ddcf048c49617e114537c16697cad93c249aafbec4e8ddf06ad5a4dc68805516478689aa5b28f3eaa1b951a008ba7ba4d71cac95a0172c6b4e47ac665e09144ea347f952bbeeac38576448cb2ae8fb792b46b08eb56856e8f9211c06cf3da4f6a4606c466f8ad6ff995f844d8d2013cb8be0d285e3fa9b5972d03426d7fc11631629e6bf9208ba880e8bfd05a23d995966b996bba879daf7c09", 0x119) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:38:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000003c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000280)=[{&(0x7f0000000100)="70940b227a431cc35707cef0f5b9b4ecc9d01b7c03b8aac988c771241854ccd5c382cec2459dfb2d41dcff9026a1537b013d430e3c77d8ce902eb9c319d6cc72b0f88c48090cbc4bb1bc6d4b3ccea3f92a3db5b12b5d74a33ba84bf301195f53f64bf1abf5e47ce5861894e234cbfbcc36c00f1fc1dc051ecf317aa835994a54b560386519efcba778fa5dc0286ae5204c3db9a1ffcd4dfaaa2824a242de0f884cdf1d443e317f0de746a100d47089c1e12edc3415561c63e29ea8b5094c0b2bdd46", 0xc2, 0x5800000000000000}, {&(0x7f0000000200)="f0aeceec74d98f91a26f6a53c72d511c525d769569b2f523c61bda1b3c6d30c5f5abdfa4f0959647d8dbb188e5012940a3db37975f6887f04df84afcc814f48617613cbb2d2ab987aa7c0e194acd9e6f9c174d57c3c1", 0x56, 0x8001}], 0x10, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug='debug'}], [{@obj_type={'obj_type', 0x3d, '#:@[cgroup*cgroup,'}}, {@euid_gt={'euid>', r1}}, {@subj_role={'subj_role', 0x3d, 'trusted&systemvmnet0procbdev'}}, {@obj_user={'obj_user', 0x3d, 'em1em0}[:'}}, {@dont_hash='dont_hash'}]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_smack_entry(r0, &(0x7f00000004c0)='security.SMACK64EXEC\x00', &(0x7f0000000500)='ext3\x00', 0x5, 0x2) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x35a) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x0) [ 396.673141] binder: 14998:15005 Release 1 refcount change on invalid ref 0 ret -22 [ 396.673147] binder: 14998:15005 unknown command 1 [ 396.673154] binder: 14998:15005 ioctl c0306201 20000580 returned -22 00:38:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 396.679270] binder: 15001:15007 unknown command 236191749 [ 396.679278] binder: 15001:15007 ioctl c0306201 200000c0 returned -22 [ 396.680497] binder: 15001:15007 unknown command 287558 [ 396.680504] binder: 15001:15007 ioctl c0306201 20000580 returned -22 [ 396.706885] binder: 15009:15013 Release 1 refcount change on invalid ref 0 ret -22 [ 396.706891] binder: 15009:15013 unknown command 1 [ 396.706898] binder: 15009:15013 ioctl c0306201 20000580 returned -22 [ 396.717126] binder: 15015:15017 unknown command 1 [ 396.717134] binder: 15015:15017 ioctl c0306201 20000580 returned -22 [ 396.723788] binder: 15015:15022 unknown command 1 [ 396.723795] binder: 15015:15022 ioctl c0306201 20000580 returned -22 [ 396.781123] binder: 15026:15035 Release 1 refcount change on invalid ref 0 ret -22 [ 396.781129] binder: 15026:15035 unknown command 1 [ 396.781137] binder: 15026:15035 ioctl c0306201 20000580 returned -22 [ 396.787039] binder: 15024:15027 unknown command 1 [ 396.787047] binder: 15024:15027 ioctl c0306201 20000580 returned -22 [ 396.805396] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 396.816525] binder: 15041:15044 Release 1 refcount change on invalid ref 0 ret -22 [ 396.816532] binder: 15041:15044 unknown command 1 [ 396.816539] binder: 15041:15044 ioctl c0306201 20000580 returned -22 [ 396.880004] binder: 15048:15051 Release 1 refcount change on invalid ref 0 ret -22 [ 396.880010] binder: 15048:15051 unknown command 1 [ 396.880017] binder: 15048:15051 ioctl c0306201 20000580 returned -22 [ 396.901790] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:38:36 executing program 5: timer_create(0xfffffffffffffffb, 0x0, &(0x7f0000044000)) r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x2fb) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) close(r1) 00:38:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x200000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:36 executing program 1: r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000180)="dc677e2cebdd83e5d61a8384e932ec25bc8071292760bcd7af4db5deb79b2b57b2e441ace3e8064fa7f9766477a9ad2bd59c910f100408d2b6ee6e77ed15967becc0c0cf", 0x44) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, "8693b191f651ff0d517649097f778c2f50ca20d18d8d04b807dfb1cf51634e79"}) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0xfffffffffffffd86) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000200)={0x20, 0x80000001, 0x8, 0x9, 0x5, 0x2}) sendto$inet(r4, 0x0, 0xfffffd33, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) ptrace$setsig(0x4203, r0, 0x101, &(0x7f0000000100)={0x34, 0x7, 0x9}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\bYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, 0x0, 0xdd) sendto$inet(r4, &(0x7f00000003c0), 0xffffffffffffffc8, 0x0, 0x0, 0x184) 00:38:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x181200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000300)=r3) r4 = dup2(r1, r0) r5 = openat$cgroup_ro(r4, &(0x7f0000000680)='io.stat\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@bridge_newneigh={0x54, 0x1c, 0x20, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x88, 0x10, 0xf}, [@NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_PROBES={0x8, 0x4, 0x1f}, @NDA_DST_MAC={0xc, 0x1, @dev={[], 0xf}}, @NDA_VLAN={0x8, 0x5, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={[], [], @multicast2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:36 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x4000000141046, 0xffffffffffffffff) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="cc"], 0x1) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x20400141049, 0x0) fallocate(r1, 0x10, 0x0, 0x10000101) [ 397.499653] binder: 15065:15068 BC_FREE_BUFFER u0000000000000000 no match [ 397.508328] binder: 15061:15067 ioctl 5601 20000100 returned -22 [ 397.510420] binder: 15064:15070 Release 1 refcount change on invalid ref 0 ret -22 [ 397.510426] binder: 15064:15070 unknown command 1 [ 397.510433] binder: 15064:15070 ioctl c0306201 20000580 returned -22 00:38:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:36 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000000080000803, 0x0) write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:autofs_device_t:s0\x00', 0x25) 00:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:36 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xe9K:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xd9\x81\x87A\xc3\xbd\xcdJx\xaa\x8f~\xb90a\xa9\xb3\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g\xff\xff\xff\xff\xff\xb8(', 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x2, 0x2, 0x8}}, 0x14) fstat(r1, &(0x7f0000000240)) 00:38:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="f4", 0x1) recvmmsg(r2, &(0x7f0000000180), 0x400000000000264, 0x0, 0x0) inotify_init() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) write(r4, &(0x7f0000000380)="58e846071d18924301418137264d8c6ddc7fb10b77f61b0d819c0a697927385456da5b97a38f0ea2d6bbec2e96d904dfd13856c1a947396f064e11ec6255d1be9109a2ed65fe1bfe0c31a55a57d3ab0d788fe2bd022631b89c3af31867c5d86b40514b67dc958bc1bb3f2da0a2bb0d0000d600000000000000", 0x79) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x100010, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) ioctl$KDENABIO(r3, 0x4b36) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000400)="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", 0x119) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 397.557117] binder: 15079:15081 Release 1 refcount change on invalid ref 0 ret -22 [ 397.557124] binder: 15079:15081 unknown command 1 [ 397.557132] binder: 15079:15081 ioctl c0306201 20000580 returned -22 [ 397.560263] binder: 15074:15080 unknown command 1 [ 397.560271] binder: 15074:15080 ioctl c0306201 20000580 returned -22 00:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:36 executing program 5: setrlimit(0x0, &(0x7f0000000040)={0x4, 0x401}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000140)=""/62) accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80800) setrlimit(0x0, &(0x7f0000000000)) 00:38:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) close(r2) [ 397.681264] binder: 15094:15098 unknown command 25349 00:38:36 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x141400, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10010, r1, 0x0) mremap(&(0x7f0000a2c000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000fd9000/0x3000)=nil) 00:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) [ 397.684398] binder: 15099:15102 Release 1 refcount change on invalid ref 0 ret -22 00:38:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xbb) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)='trusted.overlay.upper\x00', &(0x7f0000002ec0)={0x0, 0xfb, 0xa4, 0x2, 0x1, "a0b5d8466a806a0f7101aaf13ce45f4d", "137f951a9b29d49f066ef464849ddd69d2915c1e4f1dcbea79a58a662397011858365147c57253d62594c2f8e316089a7555c0d8890223b486ecca4235db9b6703fcb75525b58f3f99202869b332fd402949a1263bba643e604ff5724594a5677d76239198ea7c98e7c4b7a8db5d1d8b3fd352f03cb88f0e32f3bd4a1c58aeca0bbe4a22c7c9e552432edd1f7f0828"}, 0xa4, 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@local, 0x75}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000180)={0x1d, @broadcast, 0x4e24, 0x1, 'wrr\x00', 0x18, 0x5e6d, 0x73}, 0x2c) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000001c0)={0x2, 0x14, 0x4, 0x8001, "cacb4ecbe8c1a0e8d1de378515fe0256e0138fb7b678c3d21ab1671f47e2412f"}) clock_gettime(0x0, &(0x7f0000002dc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/8, 0x8}], 0x5, &(0x7f00000004c0)=""/162, 0xa2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/52, 0x34}], 0x2, &(0x7f0000000640)=""/7, 0x7}, 0x6c2}, {{&(0x7f0000000680)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000000900)=""/107, 0x6b}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5}, 0x3}, {{&(0x7f0000001a00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001a80)=""/193, 0xc1}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/204, 0xcc}, 0x1c4f6853}], 0x4, 0x2000, &(0x7f0000002e00)={r3, r4+10000000}) sendmmsg(r1, &(0x7f00000092c0), 0x0, 0x40000) [ 397.684407] binder: 15099:15102 BC_FREE_BUFFER u0000000000000000 no match [ 397.698374] binder: 15095:15107 Release 1 refcount change on invalid ref 0 ret -22 [ 397.698379] binder: 15095:15107 unknown command 1 [ 397.698386] binder: 15095:15107 ioctl c0306201 20000580 returned -22 [ 397.736455] binder: 15109:15113 Release 1 refcount change on invalid ref 0 ret -22 [ 397.736465] binder: 15109:15113 BC_FREE_BUFFER u0000000000000000 no match [ 397.742023] binder: 15094:15117 Release 1 refcount change on invalid ref 0 ret -22 [ 397.742030] binder: 15094:15117 unknown command 1 00:38:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x90000, 0x0) fstatfs(r0, &(0x7f0000000040)=""/24) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x200}}) setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108) 00:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) [ 397.742038] binder: 15094:15117 ioctl c0306201 20000580 returned -22 [ 397.755460] binder: 15115:15120 Acquire 1 refcount change on invalid ref 0 ret -22 [ 397.791538] binder: 15122:15128 Release 1 refcount change on invalid ref 0 ret -22 [ 397.791548] binder: 15122:15128 BC_FREE_BUFFER u0000000000000000 no match [ 397.895651] binder: 15094:15098 ioctl c0306201 200000c0 returned -22 00:38:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 397.921752] binder: 15136:15138 Release 1 refcount change on invalid ref 0 ret -22 [ 397.931060] binder: 15136:15138 BC_FREE_BUFFER u0000000000000000 no match [ 397.935881] binder: 15135:15142 unknown command 1 [ 397.935889] binder: 15135:15142 ioctl c0306201 20000580 returned -22 [ 397.939631] binder: 15140:15143 unknown command 25349 [ 397.939640] binder: 15140:15143 ioctl c0306201 200000c0 returned -22 [ 397.940397] binder: 15140:15143 Release 1 refcount change on invalid ref 0 ret -22 [ 397.940402] binder: 15140:15143 unknown command 1 [ 397.940409] binder: 15140:15143 ioctl c0306201 20000580 returned -22 [ 397.965967] binder: 15148:15149 Release 1 refcount change on invalid ref 0 ret -22 [ 397.965973] binder: 15148:15149 unknown command 1 [ 397.965981] binder: 15148:15149 ioctl c0306201 20000580 returned -22 00:38:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) 00:38:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='ext4\x00', 0x5, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x10001, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="800000001000000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) 00:38:37 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) 00:38:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:38:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 398.533940] binder: 15153:15156 unknown command 25349 [ 398.547543] binder: 15153:15156 ioctl c0306201 200000c0 returned -22 [ 398.561804] binder: 15154:15164 Release 1 refcount change on invalid ref 0 ret -22 00:38:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_read_part_table(0x4, 0x8, &(0x7f0000000680)=[{&(0x7f0000000100)="085a5986cd2ca90549794d2a3583fa9dfea83aeacaf04eca4ccaaaa2aab9a559480e338d54e08dbd50628b609ed23fb810143fe9295692af0896e09732ae8a182ee5c70cfb6fe4b82b73e4ff11d51ce55534a26229c3bc1b1ec525c0cefc15ea90271e07ab67dbbe13509126db64196e58590e45debb0f8bf07f27397b", 0x7d, 0x80000001}, {&(0x7f0000000180)="0f5d9dfcb76e69178479547fbbe35dba0de9036a4367a46030c3f2c3f78323cd02844c6f4c50b73dd21359edfd021c7db109883a168154b4c031448c2ab92a134d24f532ffe797c6120baf2dc300a3d35f89e76ef19e18354ea3479ac91d4bbcee0288498e698ef8b64bc1d3d762d5343b8b175ade05871bac4cebe5154687ce3f4e58f6fe94eb7be9aed59b7d0c787bae25da5a652f50ea159e5430e074ea3a6dce233266b272fe6548b367b116425697830c7a458b94f9c0e8bfcc8645bbe79f835176830447598cf227bbc7b236558ece23c47fc3226bb43b4af2649ef2e0310b0d1d86a1ec359d61b85cfd", 0xed, 0x80000000}, {&(0x7f0000000080)="0e689631ed928c24a64295f0b0ee912cbc3185af83c66254e21aa2dff398f416a7343e", 0x23, 0x1}, {&(0x7f0000000280)="9edbb1aee80f70a1c59cb43467821b4c1360eee16a5367a6b25f5cf267a11b8f725acc72a0a4d28c1cbe32b41f4eaa4e3d4d69512e5c3865e1d4c286f986e968235cc3b276a2387257cd86946080978a6a8c4546bfb3ad468b5af4ffcc896738cb41a3802bc2d5108a4b340bb8cc62e5b5d56c212683666546bd5f34b454d9cbb1192eb7208da3a5ad87249dbe07931c982ff0b0d539c74b9af7968e36c25fbf4bcf168e77c9a549f03a882e5c", 0xad}, {&(0x7f0000000340)="7934d6944c814194dfe05ad74871eeb5471c08b2e484dd2e8e40aa7ed5b7c0305a928ee66febe9525e7dd827e4bf377bf54d21a7462c7bb67a38f19e869186c4db4749b4954bd25ec3c6d2cd52d89805eb", 0x51, 0xfffffffeffffffff}, {&(0x7f00000003c0)="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", 0xfb, 0x1ff}, {&(0x7f00000004c0)="ba709f0064875e6ce62a72b20940f96589b5485eb15cc761937b72c5760479c89532dcb6af528ce54b7d4367defaa0c65178eba494dbc34e29e4440e9fe13f0a6306a778011e051ba2ff45b40ec88416ac7783482ac7ea83b82d7db01744e7984750eb387a66907bc4b3980d054b3f55629c077910d9ce6925aec9552ea48006eb601f9d71ea5590b689f17c011cfe552fe924e187b8c70a05eff1", 0x9b, 0x3f}, {&(0x7f0000000580)="11e3127126f62ba919b7bdab015f7f33a0dc631139db5e8074c1a5c4908433c8296990fe420ee859b74f6164c1cd420268e40861b6cffd18a6fda0ec3f6cf70b7539e5af38ee08b54cb5b8b8c2951aff261bfbfacfa7315c60192a5c0f02f4fc86f2b0f1dde90d2add678087e2d77952e4e8658dfb26d5f188c0002ac01b432fcd9d4619bf105499a9363bf5bee25484fcdccd425f836fe1ed6f8065a198c29f39dfae2112efb71161777945f527203b72cf12505c49fb6727d26504c1a97083110e6b4a20fb6eab4dbccbb1decb12ab38", 0xd1, 0x100000001}]) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) 00:38:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:37 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='ubifs\x80', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) 00:38:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000100)={0x5, 0x2671, 0x6, 0x100000000, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 398.561814] binder: 15154:15164 BC_FREE_BUFFER u0000000000000000 no match [ 398.590664] binder: 15167:15169 unknown command 1 00:38:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000003630840"], 0x0, 0x0, 0x0}) 00:38:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) ptrace$poke(0x5, r1, &(0x7f0000000140), 0x7) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000200)={0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000000000000800"], 0x0, 0x0, 0x0}) getsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 398.590674] binder: 15167:15169 ioctl c0306201 20000580 returned -22 [ 398.602689] binder: 15153:15170 Release 1 refcount change on invalid ref 0 ret -22 [ 398.602696] binder: 15153:15170 unknown command 1 [ 398.602705] binder: 15153:15170 ioctl c0306201 20000580 returned -22 [ 398.633146] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 398.633181] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 398.633201] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 398.651305] binder: 15178:15183 unknown command 1 [ 398.651314] binder: 15178:15183 ioctl c0306201 20000580 returned -22 [ 398.651384] binder: 15177:15184 Release 1 refcount change on invalid ref 0 ret -22 [ 398.651392] binder: 15177:15184 BC_FREE_BUFFER u0000000000000000 no match [ 398.671541] EXT4-fs error (device loop0): ext4_iget:4547: inode #2: comm syz-executor.0: root inode unallocated 00:38:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="066304400000000001"], 0x0, 0x0, 0x0}) [ 398.674358] EXT4-fs (loop0): get root inode failed [ 398.674377] EXT4-fs (loop0): mount failed INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes [ 572.805857] INFO: task syz-executor.0:15161 blocked for more than 140 seconds. [ 572.815412] Not tainted 4.9.155+ #27 [ 572.820387] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.829318] syz-executor.0 D28976 15161 12678 0x00000004 [ 572.836989] ffff8801c9c7af80 0000000000000000 ffff8801db721000 ffff8801da6b2f80 [ 572.846135] ffff8801db721018 ffff8801c5277c48 ffffffff82806806 ffffffff815cc960 [ 572.854848] 0000000000000000 ffff8801c9c7b830 0000000000000006 ffff8801db7218f0 [ 572.865174] Call Trace: [ 572.868534] [] ? __schedule+0x656/0x1b50 [ 572.875180] [] ? blkdev_put+0x560/0x560 [ 572.883173] [] schedule+0x92/0x1c0 [ 572.890124] [] schedule_preempt_disabled+0x13/0x20 [ 572.898055] [] mutex_lock_nested+0x38d/0x920 [ 572.905060] [] ? blkdev_put+0x2b/0x560 [ 572.911896] [] ? mutex_trylock+0x3f0/0x3f0 [ 572.918828] [] ? locks_remove_file+0x32f/0x430 [ 572.928030] [] ? blkdev_put+0x560/0x560 [ 572.935035] [] blkdev_put+0x2b/0x560 [ 572.941111] [] ? blkdev_put+0x560/0x560 [ 572.948296] [] blkdev_close+0x8b/0xb0 [ 572.954721] [] __fput+0x274/0x720 [ 572.961826] [] ____fput+0x16/0x20 [ 572.967847] [] task_work_run+0x108/0x180 [ 572.975322] [] exit_to_usermode_loop+0x13b/0x160 [ 572.983092] [] do_syscall_64+0x3f7/0x570 [ 572.990088] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 572.998899] [ 572.998899] Showing all locks held in the system: [ 573.007109] 2 locks held by khungtaskd/24: [ 573.011697] #0: (rcu_read_lock){......}, at: [] watchdog+0x11b/0xa40 [ 573.021819] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x7f/0x21f [ 573.033401] 1 lock held by rsyslogd/1905: [ 573.038296] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xa8/0xd0 [ 573.047731] 2 locks held by getty/2032: [ 573.053139] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.064144] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x1fe/0x1820 [ 573.075854] 2 locks held by syz-executor.1/12685: [ 573.081205] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10e/0xeb0 [ 573.092131] #1: (loop_ctl_mutex){+.+.+.}, at: [] lo_open+0x1d/0xc0 [ 573.102062] 1 lock held by syz-executor.0/15161: [ 573.107440] #0: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_put+0x2b/0x560 [ 573.118836] 2 locks held by syz-executor.0/15163: [ 573.124923] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_put+0xbb/0x840 [ 573.136358] #1: (loop_ctl_mutex){+.+.+.}, at: [] lo_release+0x1e/0x190 [ 573.146811] 1 lock held by syz-executor.0/15193: [ 573.152732] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10e/0xeb0 [ 573.163027] 1 lock held by blkid/15174: [ 573.167503] #0: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_put+0x2b/0x560 [ 573.179309] 2 locks held by blkid/15179: [ 573.184073] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_put+0xbb/0x840 [ 573.195927] #1: (loop_ctl_mutex){+.+.+.}, at: [] lo_release+0x1e/0x190 [ 573.208392] 2 locks held by syz-executor.5/15182: [ 573.216065] #0: (loop_ctl_mutex/1){+.+.+.}, at: [] lo_ioctl+0x85/0x1a10 [ 573.228325] #1: (&bdev->bd_mutex){+.+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 573.239867] 1 lock held by syz-executor.5/15191: [ 573.245658] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10e/0xeb0 [ 573.258919] [ 573.261039] ============================================= [ 573.261039] [ 573.270383] NMI backtrace for cpu 0 [ 573.276440] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 [ 573.284988] ffff8801d9907cd0 ffffffff81b47871 0000000000000000 0000000000000000 [ 573.296297] 0000000000000000 ffffffff81097301 00000000003fff88 ffff8801d9907d08 [ 573.306808] ffffffff81b52afc 0000000000000000 0000000000000000 0000000000000000 [ 573.317057] Call Trace: [ 573.320189] [] dump_stack+0xc1/0x120 [ 573.327012] [] ? irq_force_complete_move+0x281/0x300 [ 573.335291] [] nmi_cpu_backtrace.cold+0x47/0x87 [ 573.342495] [] ? irq_force_complete_move+0x300/0x300 [ 573.352566] [] nmi_trigger_cpumask_backtrace+0x124/0x155 [ 573.360467] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 573.368519] [] watchdog+0x5f7/0xa40 [ 573.374512] [] ? watchdog+0x11b/0xa40 [ 573.381400] [] ? reset_hung_task_detector+0x20/0x20 [ 573.389771] [] kthread+0x278/0x310 [ 573.396078] [] ? kthread_park+0xa0/0xa0 [ 573.403075] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 573.411545] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 573.418997] [] ? finish_task_switch+0x1e5/0x660 [ 573.426361] [] ? finish_task_switch+0x1b7/0x660 [ 573.433792] [] ? __switch_to_asm+0x34/0x70 [ 573.442038] [] ? __switch_to_asm+0x40/0x70 [ 573.448469] [] ? __switch_to_asm+0x34/0x70 [ 573.455520] [] ? kthread_park+0xa0/0xa0 [ 573.462397] [] ? kthread_park+0xa0/0xa0 [ 573.468871] [] ret_from_fork+0x5c/0x70 [ 573.475031] Sending NMI from CPU 0 to CPUs 1: [ 573.480255] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff82815692 [ 573.488824] Kernel panic - not syncing: hung_task: blocked tasks [ 573.495626] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.155+ #27 [ 573.503081] ffff8801d9907c68 ffffffff81b47871 ffff8801c9c7af00 ffffffff82a79d00 [ 573.512855] 00000000ffffffff 0000000000000000 00000000003fff88 ffff8801d9907d48 [ 573.522200] ffffffff813f746a 0000000041b58ab3 ffffffff82e35b4a ffffffff813f7291 [ 573.531333] Call Trace: [ 573.533991] [] dump_stack+0xc1/0x120 [ 573.540860] [] panic+0x1d9/0x3bd [ 573.547160] [] ? add_taint.cold+0x16/0x16 [ 573.554616] [] ? irq_force_complete_move+0x300/0x300 [ 573.562803] [] ? ___preempt_schedule+0x16/0x18 [ 573.570356] [] ? nmi_trigger_cpumask_backtrace+0x135/0x155 [ 573.579303] [] ? nmi_trigger_cpumask_backtrace+0x13f/0x155 [ 573.588102] [] watchdog+0x608/0xa40 [ 573.595333] [] ? watchdog+0x11b/0xa40 [ 573.601540] [] ? reset_hung_task_detector+0x20/0x20 [ 573.609791] [] kthread+0x278/0x310 [ 573.616800] [] ? kthread_park+0xa0/0xa0 [ 573.623332] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 573.631153] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 573.638843] [] ? finish_task_switch+0x1e5/0x660 [ 573.646769] [] ? finish_task_switch+0x1b7/0x660 [ 573.654972] [] ? __switch_to_asm+0x34/0x70 [ 573.661374] [] ? __switch_to_asm+0x40/0x70 [ 573.669010] [] ? __switch_to_asm+0x34/0x70 [ 573.675351] [] ? kthread_park+0xa0/0xa0 [ 573.682910] [] ? kthread_park+0xa0/0xa0 [ 573.690433] [] ret_from_fork+0x5c/0x70 [ 573.699796] Kernel Offset: disabled [ 573.705328] Rebooting in 86400 seconds..