CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0xb34, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x933}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r3 = add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="afedafbedd1908554d11198e02c2df4bb35fe3d5e60f4562b9ddf093ab7b804e8fde86b1632c54904ca5c4859d5203c060aa80aaa868abdc2d9495e9f8b1f3625ead49df46f3b60cb85faaa1a457381792e427490afe9cea95793c8414f60120546ab18993036ce942aa8f2f32ec2f644fd0a322da55903c379e63c0673520599d2389c29a603ede598ec5430d90ddfe37cb2044ef", 0x95, 0xfffffffffffffff8) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r3) 19:53:44 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x48) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/7) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 436.300292] binder: 5515:5519 unknown command 536871488 [ 436.309634] binder: 5515:5519 ioctl c0306201 20000440 returned -22 [ 436.329143] binder: 5515:5519 ERROR: BC_REGISTER_LOOPER called without request 19:53:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="de8b52147e8037430497f0d58064178392ba25886ffa4e083f0e1dc0e9bc05c87bc196450040021ad8b0570c02f51100000000c05cff41be13f809e053853d134501fed5133ab7ddf322070015b6cb1cbe3ee677e2af78d2284d98194598c38cb45f3858a67a0b87d1479c43a3d94ecf298413eadce106380aba71d9fe5dd7c07b62ba489934886424a1"], 0x0, 0x0, &(0x7f0000000800)}) getcwd(&(0x7f0000000000)=""/192, 0xc0) 19:53:44 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) tgkill(r0, r1, 0x38) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 436.359990] binder: 5508:5513 unknown command 1 [ 436.377157] binder: 5515:5534 unknown command 4743953 [ 436.377168] binder: 5515:5534 ioctl c0306201 20000080 returned -22 [ 436.380894] binder: 5532:5536 unknown command 340954078 [ 436.380923] binder: 5532:5536 ioctl c0306201 20000780 returned -22 [ 436.381300] binder: 5532:5536 unknown command 340954078 [ 436.381308] binder: 5532:5536 ioctl c0306201 20000780 returned -22 [ 436.430337] binder: 5508:5513 ioctl c0306201 20000780 returned -22 19:53:44 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x30, r0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:44 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fchmod(r0, 0x1) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400400, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 19:53:44 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:44 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x1) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)) 19:53:44 executing program 2: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f00000001c0)={0x19f80448, 0x8, 0x0, 0xfae, 0x0, 0x8}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5547607c2ceb1eb7862f65edad4089"], 0x0, 0x0, &(0x7f0000000800)}) [ 436.994706] binder: 5562:5564 unknown command 2086684501 [ 437.000565] binder: 5562:5564 ioctl c0306201 20000780 returned -22 [ 437.008249] binder: 5562:5564 unknown command 2086684501 [ 437.013825] binder: 5562:5564 ioctl c0306201 20000780 returned -22 19:53:45 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) 19:53:45 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000640)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:45 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000640)) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 437.086627] binder: BINDER_SET_CONTEXT_MGR already set [ 437.087765] binder: 5515:5571 unknown command 536871488 [ 437.087775] binder: 5515:5571 ioctl c0306201 20000440 returned -22 [ 437.087863] binder: 5515:5570 ERROR: BC_REGISTER_LOOPER called without request [ 437.087944] binder: 5515:5571 unknown command 4743953 [ 437.087955] binder: 5515:5571 ioctl c0306201 20000080 returned -22 19:53:45 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@generic={0x2, 0x0, 0x10001}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r3, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:45 executing program 1: r0 = gettid() capset(&(0x7f0000000100)={0x19980330, r0}, &(0x7f00000000c0)={0x8, 0x100000001, 0x6, 0x2, 0x0, 0xa6}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:45 executing program 0: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x7fc) 19:53:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4c054) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="57aa00004b235e48c98a9255c51929ed8cd0233f14886af2bd3d3795ef6abb86d475974dc33ac511639560b9cadafe558bb6c1568599ced5c588bf278fa2bf03cf30ae34f263c21098a9564ba7d341d9893f8fc761bc7c145fb122135bd142e56f036145e85ff91cb8ab64cfce2b664064df3a1b15f19400aa56e997a72543b8a01778fa60025ec36b"], 0x0, 0x0, &(0x7f0000000800)}) 19:53:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb83194eadaaa5429, 0x6010, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x8a, 0x1, 0x7}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done={0x40086310, 0x2}], 0xb2, 0x0, &(0x7f0000000300)="00b98d0d247f21a25894ed4c6416fd9629a6819a1bfbc6117f3f7e1b70bef24f1cb0cfdd04f930dfb6ad000000000000cb586f11021f1243dfe00b834af059798c12897bebf99460874082e2f3379ab72717d6bd96894b1a987a4a4e81c85bed4840fd690bce058602add4e414ed850751d0cdd4fbee28cce543a58e93b0cbc51f611e8b6f5a6e44ba91f06397d2552bf4f926e12dc462daab37be64bdcf335691de22892012ca14a63ad6013ae9a2c9d503"}) [ 437.128807] binder: 5515:5534 ioctl 40046207 0 returned -16 19:53:45 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:45 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setgid(r1) fcntl$notify(r0, 0x402, 0x80000034) ioctl$RTC_WIE_OFF(r0, 0x7010) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) modify_ldt$read(0x0, &(0x7f0000001140)=""/4096, 0x9ea1bed63d674568) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0xffffffffffffff86, 0x0, &(0x7f00000000c0)="fa730412768d8976f388603e1622c7b53595ac8dc216eee0ccdee2f34338b5282d0e49186f721fad822e323a165cbe4b4e009a8fad9b83cb93eb20182a26fac93bf0e96f0b695e41ed28b8580000e92660d8700d5fc99d430765b878b2f12c111707cf8cc75bbd5c1b0503af35fb66a623d000"}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000240)=0x4) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000040)={0x7, 0x100000001}) [ 437.170349] binder: 5584:5585 unknown command 43607 [ 437.175433] binder: 5584:5585 ioctl c0306201 20000780 returned -22 [ 437.184804] binder: 5589:5590 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 437.199566] binder: 5589:5593 BC_DEAD_BINDER_DONE 0000000000000002 not found 19:53:45 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x14, 0x0, &(0x7f0000000140)="f0d4cbde964e1e89017858636af96a9ebfabeb6b"}) [ 437.231233] binder: 5595:5597 unknown command 536871488 [ 437.231243] binder: 5595:5597 ioctl c0306201 20000440 returned -22 [ 437.231321] binder: 5595:5597 ERROR: BC_REGISTER_LOOPER called without request 19:53:45 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x10) accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000140)) 19:53:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000800)}) [ 437.278834] binder: 5595:5606 unknown command 4743953 [ 437.278845] binder: 5595:5606 ioctl c0306201 20000080 returned -22 19:53:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x7e) socket$key(0xf, 0x3, 0x2) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d7300008db522c8689a4271ff54a763f372ced6f9d1c84138838278ac5164750f16173d7cb5c308f44323b785e84c139da485eb9bd68d63330fb8290da7976e5e67285786ec3b4831c0b100"], 0x0, 0x0, &(0x7f0000000800)}) 19:53:45 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local, 0x0}, &(0x7f00000000c0)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r1) [ 437.378317] binder: 5622:5623 unknown command 0 [ 437.389876] binder: 5622:5623 ioctl c0306201 20000780 returned -22 19:53:45 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 437.429222] binder: 5626:5628 unknown command 29453 [ 437.429231] binder: 5626:5628 ioctl c0306201 20000780 returned -22 [ 437.480236] binder: 5622:5623 unknown command 0 [ 437.485237] binder: 5622:5623 ioctl c0306201 20000780 returned -22 19:53:45 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000640)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:45 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000640)) socket$inet6(0xa, 0x1000000000002, 0x0) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:46 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0//ile0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000001c0)=""/4, &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000800)}) r2 = accept(r1, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000340)=""/85, &(0x7f0000000240)=0x55) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xa, 0x1, "7c1ec30905b75c910b099d94fa4cbf9a13cad0be46c2d084aec7c12061cc238fe3e1fead59fc8204e1f90b4f031d7838c1865c372dcde90d22a153a3d6abbdaf", "c4df35b65da88710d4d493982e3c9cd04e0eca53ace350a14892ed6b5ea24e0d", [0x200, 0x5]}) 19:53:46 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x800) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r2, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:46 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x5}) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000140)=[0xee00]) stat(&(0x7f00000001c0)='\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000005c0)=[r1, 0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xee00]) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000680), &(0x7f0000000700), &(0x7f0000000600)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) syz_open_procfs(r7, &(0x7f0000000580)='stack\x00') fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000380)={{0x1, 0x5}, 'port0\x00', 0x4a, 0x4, 0x5d3f, 0x4, 0x200, 0x9, 0x5, 0x0, 0x3, 0x8}) setgroups(0x9, &(0x7f0000000540)=[r1, r2, r3, r4, r5, r6, r8, r9, r10]) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 19:53:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4e9, 0x0, &(0x7f0000000100)="86a23e325d42f1829a992328043d2464baf64f"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) fdatasync(r0) fchdir(r0) 19:53:46 executing program 5: sysfs$2(0x2, 0x8, &(0x7f0000000180)=""/20) r0 = socket$inet6(0xa, 0x3, 0xb508) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x400, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f0000000280)="32faa373e7a7ff9e1f8a799fbfd19465c3810d4777d0f0b0ecc9c7d685606736feab4fc44162e2d1c2", 0x29) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ecffffff2714"], 0x0, 0x0, &(0x7f0000000800)}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000001c0)={0x100, 0x1, {0x0, 0x0, 0x9, 0x3, 0xfdf}}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x9) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x535, 0x40040) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x13}, @loopback, 0x0, 0x3, [@empty, @remote, @loopback]}, 0x1c) getpeername(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000140)=0x80) [ 438.013870] binder: BINDER_SET_CONTEXT_MGR already set [ 438.019378] binder: 5595:5644 ioctl 40046207 0 returned -16 [ 438.026959] binder: 5595:5644 unknown command 536871488 [ 438.032481] binder: 5595:5644 ioctl c0306201 20000440 returned -22 [ 438.040597] binder: 5595:5606 ERROR: BC_REGISTER_LOOPER called without request [ 438.048102] binder: 5595:5644 unknown command 4743953 [ 438.053368] binder: 5595:5644 ioctl c0306201 20000080 returned -22 19:53:46 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x7, 0x6, 0x80000000, 0x7, 0x0, 0x57146f59}) 19:53:46 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 19:53:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="f2036d00"], 0x0, 0x0, &(0x7f0000000800)}) 19:53:46 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYRES16=r0]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 438.110779] binder: 5657:5659 unknown command -20 [ 438.111786] binder: 5660:5663 unknown command 536871488 [ 438.111795] binder: 5660:5663 ioctl c0306201 20000440 returned -22 [ 438.111873] binder: 5660:5663 ERROR: BC_REGISTER_LOOPER called without request 19:53:46 executing program 1: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0x4, 0x4, 0x7, 0x2, 0x2, 0x3ff}) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$TCSBRKP(r1, 0x5425, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:46 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = memfd_create(&(0x7f0000000000)='@posix_acl_access\x00', 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x32f) 19:53:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x2010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) [ 438.113514] binder: 5655:5665 unknown command 0 [ 438.113522] binder: 5655:5665 ioctl c0306201 20000780 returned -22 [ 438.114091] binder: 5655:5665 unknown command 0 [ 438.114099] binder: 5655:5665 ioctl c0306201 20000780 returned -22 [ 438.158501] binder: 5657:5673 ioctl 40046205 9 returned -22 [ 438.161114] binder: 5660:5674 unknown command 4743953 [ 438.161124] binder: 5660:5674 ioctl c0306201 20000080 returned -22 [ 438.165999] binder: 5667:5677 unknown command 7144434 [ 438.166007] binder: 5667:5677 ioctl c0306201 20000780 returned -22 [ 438.168969] binder: 5667:5677 unknown command 7144434 [ 438.168977] binder: 5667:5677 ioctl c0306201 20000780 returned -22 [ 438.184569] capability: warning: `syz-executor1' uses deprecated v2 capabilities in a way that may be insecure [ 438.256463] binder: 5657:5659 ioctl c0306201 20000780 returned -22 [ 438.265028] binder: 5657:5659 unknown command -20 19:53:46 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 438.265272] binder: 5657:5673 ioctl 40046205 9 returned -22 [ 438.276028] binder: 5657:5659 ioctl c0306201 20000780 returned -22 19:53:46 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:46 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000640)) socket$inet6(0xa, 0x1000000000002, 0x0) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:46 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:46 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0//ile0\x00') mount(&(0x7f0000000040)='./file0//ile0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x80, 0x0) 19:53:46 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:46 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f00000001c0)=""/253, 0xfd}], 0x2, &(0x7f0000000300)=""/11, 0xb, 0xfffffffffffffff9}, 0x40000000) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x57, 0x9, 0x7, {0x5, 0x5d}, {0x7fff, 0x8d}, @const={0x4, {0x800, 0x555, 0xffffffffffffffff, 0xffffffffffffffab}}}) pselect6(0x40, &(0x7f0000000380)={0x2, 0x4, 0xfffffffffffffffc, 0x3ff, 0x5, 0x80000001, 0xff, 0x2}, &(0x7f00000003c0)={0xfffffffffffffffb, 0x3, 0x3, 0xfffffffffffffeff, 0x4, 0xff, 0x81, 0xffff}, &(0x7f0000000400)={0x6a9d6da8, 0x5, 0xfff, 0x4, 0x6, 0x80, 0x800, 0x18}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) 19:53:46 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r2, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:46 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) [ 438.914030] binder: BINDER_SET_CONTEXT_MGR already set [ 438.919376] binder: 5660:5707 ioctl 40046207 0 returned -16 [ 438.925566] binder: 5660:5707 unknown command 536871488 [ 438.930936] binder: 5660:5707 ioctl c0306201 20000440 returned -22 [ 438.937572] binder: 5660:5674 ERROR: BC_REGISTER_LOOPER called without request [ 438.945113] binder: 5660:5707 unknown command 4743953 [ 438.950441] binder: 5660:5707 ioctl c0306201 20000080 returned -22 19:53:46 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/access\x00', 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) pwrite64(r0, &(0x7f00000001c0)="33f5022b3b889785d50253a1845c86eb75ab3ac63928b466901cc17a5b3ef0a578893095df8d499cfaee7862310eca3c6cc94be95fafe2fa73114fc923687dfce38b6d657fe17610e9cc97f91cc7ba39b2068fb3f91e5c70708bd7bd54d6eefba7cba8993b9060d7faf340299a31c13fa6ea52d28c0f4bd24db400e69d2b9c0a9a48bdc1572ecef9f5390dd2e6398a70b42f10", 0x93, 0x0) 19:53:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x101002, 0x0) fallocate(r0, 0x50, 0xfff, 0x1) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x200000) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) 19:53:46 executing program 1: membarrier(0x10, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x400, 0x1, 0x0, 0x3}, {0x1, 0x20, 0x2, 0x6}, {0x6, 0x7, 0x400, 0x80000001}]}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)="2f70726f632f7379732f6e65742f697076342f76732f65787069726500000000000000fef0dce623bc6aeb62af28b28727e4028c252d7c99839442f0aa11d598dd9ef6b0a6d3907d7b077a1740df713db12ba99cf32c4c4d8cae8dff06ad49461eca672a097d55f76dfb00ea62c9c91cb8e37f94a9f9721212ddd085acc7dd131a0a8c3f12e398495f454d1f00000000006203b7", 0x2, 0x0) setns(r1, 0x42000000) 19:53:46 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pwrite64(r0, &(0x7f0000000000)="f053a7abab29fe94d167ad55f1123251d403225e15a0c39aea46a929ea47847400bbaca286faeebbdc1eef2b61853e2aa390e4101a8aab2071cd160001f2dd3fc4ec08bebaf088a224f4d788259fa28dc6", 0x51, 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') poll(&(0x7f00000000c0)=[{r0, 0x21}], 0x1, 0x6) socket$inet6(0xa, 0x803, 0x0) 19:53:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0da0f704ac476a1a10c6ea90b18788ba4a2039bb7c5356f5533b0e0a65fd0d2a9df32d03dcfa9bb9ed4ab52cf7e82408a7a81806ce8cdd2bc18e7fda595d341c413f79f7e9a1f50eeb5ccb38f338526c5ac85d1003635d6503b7e7b50aab2f28e07c4bbe38c5556d6c674f71ea90d3e3749b70ca725580837007bbd44345c3b62af4b71ff41acaaa8d3660e8bf1bb1df671ea77eb0051c5dbf6cfb35da512ba967bdb9228eb7eb3f115889ff9e274ce25867"], 0x0, 0x0, &(0x7f0000000800)}) r1 = request_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)='/dev/binder#\x00', 0xfffffffffffffff9) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="901651f8820d516bdafb4f6592f167593637df69057b52c45e6e6be79c6ac19873183b3bae8c66aeb3bc436e26427ff8fc61c0ce12b72e6787a3c5a5bad83c3bf4fc176e4e1ad0b4a1881ccee8128f644871", 0x52, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000280)=[{&(0x7f0000000180)="c2b6d7dc1f739a1c535aa5fd86f7bc0a87442b594294435c458f39458a34d96fa7ddb54a54a8f870de2a70e0cad86c6484a0532a9b6c6eac04", 0x39}, {&(0x7f00000001c0)="0711b74ab1b34a55605046554864a1d5d134bf38aec254f26d3a3e69d18b6508a6865198c622b609041d97a43db3fe9842be1cc635c2851ca8d5edcf7d2e796d048a887b85cfe1bd2a20b868da4003b2efa855349cd89c", 0x57}, {&(0x7f0000000240)="fb61d142b1", 0x5}], 0x3, r2) [ 438.972381] binder: 5710:5713 ioctl 40304580 20000000 returned -22 [ 438.980114] binder: 5714:5715 ioctl 4b37 0 returned -22 [ 438.981593] binder: 5714:5716 ioctl 4b37 0 returned -22 [ 438.998653] binder: 5710:5721 ioctl 40304580 20000000 returned -22 19:53:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='c\x00\x00'], 0x0, 0x0, &(0x7f0000000800)}) r1 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x3b, @local, 0x4e24, 0x0, 'wlc\x00', 0x4, 0x598, 0x36}, 0x2c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) 19:53:46 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x800, 0x400) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) [ 439.035629] binder: 5722:5726 unknown command 536871488 [ 439.041966] binder: 5728:5730 unknown command 83337229 [ 439.041972] binder: 5728:5730 ioctl c0306201 20000780 returned -22 [ 439.042352] binder: 5728:5730 unknown command 83337229 [ 439.042357] binder: 5728:5730 ioctl c0306201 20000780 returned -22 [ 439.063308] binder: 5734:5736 unknown command 99 [ 439.063317] binder: 5734:5736 ioctl c0306201 20000780 returned -22 [ 439.064207] binder: 5734:5736 unknown command 99 [ 439.064215] binder: 5734:5736 ioctl c0306201 20000780 returned -22 [ 439.087314] binder: 5722:5741 unknown command 0 [ 439.087324] binder: 5722:5741 ioctl c0306201 20000040 returned -22 19:53:47 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 439.087545] binder: 5722:5741 unknown command 4743953 [ 439.087552] binder: 5722:5741 ioctl c0306201 20000080 returned -22 [ 439.149668] binder: 5722:5726 ioctl c0306201 20000440 returned -22 [ 439.162466] binder: BINDER_SET_CONTEXT_MGR already set [ 439.163882] binder: 5722:5741 unknown command 536871488 [ 439.163891] binder: 5722:5741 ioctl c0306201 20000440 returned -22 [ 439.163950] binder: 5722:5755 unknown command 0 [ 439.163959] binder: 5722:5755 ioctl c0306201 20000040 returned -22 [ 439.174969] binder: 5722:5741 unknown command 4743953 [ 439.174979] binder: 5722:5741 ioctl c0306201 20000080 returned -22 [ 439.210454] binder: 5722:5726 ioctl 40046207 0 returned -16 19:53:47 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:47 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x500, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x1, 0xffffffffffffffff) splice(r1, &(0x7f0000000080), r2, &(0x7f00000000c0), 0x1, 0x0) r3 = memfd_create(&(0x7f0000000280)='posix_acl_access,!keyring\x00', 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000002500)={0x7, 0x70, 0x10000, 0x0, 0x5, 0x3, 0x0, 0x1000, 0x4400, 0x8, 0x3ff, 0x4, 0x4, 0x800, 0xef1, 0x101, 0x7, 0x800000, 0x0, 0x0, 0x8, 0x40, 0x1, 0x10001, 0xfcb, 0x0, 0x0, 0x335b52e9, 0x4, 0x200, 0x0, 0x100000001, 0xd10, 0x3f, 0x0, 0x0, 0x9, 0x3603a551, 0x0, 0x3, 0x2, @perf_config_ext={0xfffffffffffffff8, 0xc51}, 0x0, 0xffffffffabc5c266, 0x1000, 0x5, 0x0, 0x0, 0x6}, r4, 0x1, r2, 0x8) add_key$keyring(&(0x7f0000002880)='keyring\x00', &(0x7f00000028c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000002800)='user\x00', &(0x7f0000002840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000002a00), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth1\x00', 0x4}, 0x18) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x414000, 0x0) gettid() ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f00000002c0)={0x830a, 0x3, 0x70000, 0x4}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000340)=0x2e8fc730) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000001900)) sendmsg$nl_netfilter(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1ce}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendfile(r2, r5, &(0x7f0000002440), 0x2000005) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000240)={0x5, 0x67, &(0x7f00000001c0)="d80fa2b278ad0bd86cbe41a1a1aff823a81d401190e0426626a6842caa538590ef178aaf0618d100b73594d26b5baa13422d930d5ed0fb3f9460083c84888ebdc4d9fb3b01531917cb702ba40fd1e47af3b4ff6b4f83726e6ea54ba4c5ebc8440637584b4b1f8a"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xb8, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, r2, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x60, 0x10, &(0x7f00000002c0)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280), 0x1, 0x4, 0x35}, @fda={0x66646185, 0x1, 0x0, 0x8}], &(0x7f0000000340)=[0x78, 0x38]}}, @increfs_done={0x40106308, r2}, @decrefs, @transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f00000003c0)=[@flat={0x77622a85, 0x10b, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000380), 0x1, 0x2, 0x3f}], &(0x7f0000000400)=[0x28]}}], 0x3, 0x0, &(0x7f0000000500)="c6d823"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d6372246cfed03cf91dbe8882d286539a9566c726e9b27b3e22c0439cccd1381311a43cb23c16801a1c458dae65d0717f172c472c28d5083685fd243c60b4bc6753f4622e743ab4f37b9d80fc53baa5e6fead578b2527c0b2d1d018b474876ff8297dfc8478c31f0721b051e1400e7f49888b365c97849a75ad254f7aad39fcda43a4eacbb9c1d06f07d30067ef7f65805eeafd3ae358e06ce7832c6f8ce3c73dbcb7ff4e0cc6a1846eab9877408c0d000718802d1cf85864a50181e6ca5fec24a72f61f01207035557a65699"], 0x0, 0x0, &(0x7f0000000800)}) 19:53:47 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)="63e76b6f7570323f9b77f9686063ca0e70bb4aa8ecaf60d8fa86ec1c55ea6dc61cbfde6a8af4cf00f6e9d5b2b58aed9014c495ab99fda76075f1691a0bc5ad362feb936414f2d0de0571dd29e3004704f9c958816c3cc2152b3d3ba31e7e1c5fba4954bef6054c5e5d2bb06bb5db15", 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0//ile0\x00') 19:53:47 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) ioprio_get$pid(0x2, r2) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r4, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:47 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000640)) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:47 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 19:53:47 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x100000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xab, 0x20000) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 439.715005] binder: 5765:5769 unknown command 536871488 [ 439.748113] binder: 5765:5769 ioctl c0306201 20000440 returned -22 19:53:47 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:47 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x100000000000, 0x80) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x400000) fchdir(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:47 executing program 0: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) 19:53:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) [ 439.773457] binder: 5765:5788 ERROR: BC_REGISTER_LOOPER called without request [ 439.799118] binder: 5765:5769 unknown command 4743953 [ 439.801892] binder: 5795:5796 BC_INCREFS_DONE u0000000000000000 no match 19:53:47 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r0 = getpid() capset(&(0x7f0000000080)={0x399f1736, r0}, &(0x7f00000000c0)={0x2, 0x5, 0x2, 0x8, 0x1, 0x4}) [ 439.801900] binder: 5795:5796 got reply transaction with no transaction stack [ 439.801925] binder: 5795:5796 transaction failed 29201/-71, size 96-16 line 2921 [ 439.802105] binder: 5795:5796 unknown command 611476237 [ 439.802113] binder: 5795:5796 ioctl c0306201 20000780 returned -22 [ 439.802592] binder: 5795:5797 BC_INCREFS_DONE u0000000000000000 no match 19:53:47 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x10001) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80000000080000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000340)={@loopback, r2}, 0x14) rmdir(&(0x7f0000000040)='./file0//ile0\x00') getxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)=""/73, 0x49) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 439.802623] binder: 5795:5797 got reply transaction with no transaction stack [ 439.802632] binder: 5795:5797 transaction failed 29201/-71, size 96-16 line 2921 [ 439.802787] binder: 5795:5797 unknown command 611476237 [ 439.802794] binder: 5795:5797 ioctl c0306201 20000780 returned -22 [ 439.916890] binder: 5765:5769 ioctl c0306201 20000080 returned -22 19:53:47 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 439.931586] binder: BINDER_SET_CONTEXT_MGR already set [ 439.937166] binder: 5765:5769 ioctl 40046207 0 returned -16 [ 439.940105] binder: 5765:5788 unknown command 536871488 [ 439.940113] binder: 5765:5788 ioctl c0306201 20000440 returned -22 [ 439.940147] binder: 5765:5816 ERROR: BC_REGISTER_LOOPER called without request [ 439.942932] binder: 5765:5788 unknown command 4743953 [ 439.942940] binder: 5765:5788 ioctl c0306201 20000080 returned -22 19:53:48 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d630000be7edc4267dd721ff75f2b29180d7005d4f3e14b3425eb12bcabbc20d32839ed8a93b2cf88a02bb0f9"], 0x0, 0x0, &(0x7f0000000800)}) ioctl(r0, 0x4, &(0x7f0000000040)="4c587dee065d9754b1525a820eb7eb34b42c29db153f6beb002aa872bff2469f2c3f4ecb658fed67dd8a3b5062004ed9445ce67bbcb4eece9b8711c7ab477e2296e1cdfca6734d54b47ec3379c1dce5c23fd60c8a67a5e03189c847a417420b1fdf75a9caa861eac2110f5d81fd531130968f2fbc9f7d681017bb9c3128ddfce839866e7b22af286ea235080626ebdcacf8599a26e33d3a529a82e4a5fa47fcf5d7b7753d63d8d87dc24bdf1c3d7341683374a74c269ae20bd95f8c821222961737ea868c747aed864c445c0434ccb3f7d") 19:53:48 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0xb24, 0x4004000507, 0x4000000000007e, 0xfffffffffffeff00, 0x6, 0xa0}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x54) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x7) 19:53:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2000, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x2, 0x2, 0x1, 0x7ff, 0x59, 0x8, 0x8, 0x2, 0x0, 0xe8e8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xffffffffffffff2c, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x25c, 0x0, &(0x7f0000000800)}) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x422001, 0x0) 19:53:48 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x80) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 19:53:48 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000340), 0xfffffffffffffff7) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = gettid() sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x14008000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=@dellink={0x60, 0x11, 0x304, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10004}, [@IFLA_WEIGHT={0x8, 0xf, 0xff}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_ADDRESS={0xc, 0x1, @random="0dff08a8cc4f"}, @IFLA_IFALIASn={0x4}, @IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x2}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x5a3}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r4, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) fgetxattr(r2, &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000480)=""/17, 0x11) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000800)=ANY=[@ANYBLOB="27c0cd4b2cbff25180ebb524d5d02f2ed4de219f800b96d759a736d9ba0831f9744d6a47fea68e0f284f1e30dad02effffbf40da9e6971e2dae57764bfd5018c64c1360821dda3985c5312976528ff6d8a75f44b97751e44f741329a32d32ebb749afc5acfbd1af166226d66a160d3e800eeab8ed0bd75f7a08c58544b99e43ba371a47f5e969e4d48884776fc593527845382c30cedf76576bca9ac779cb34656c157761338452aa22542c0643a400ffadc76a2bf452587a283e9aa86ca8b3ed7e251242653bcec750d5100026c4a5c468b1f"]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b7da21c"], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r4, @ANYPTR, @ANYRESOCT=0x0, @ANYPTR, @ANYBLOB="1ee914904a3908500a84a6fc0d4a58e89b2dfd1e0dc27b62d19738312f58f7b58cd98d883b3c67d22675d0803e1f192323dd9c63311fc15a6600b19f77", @ANYPTR, @ANYRES16=r2], @ANYRESDEC=0x0]], 0xfffffffffffffdfd, 0x0, &(0x7f0000000480)}) 19:53:48 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:48 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x4, 0x8}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) sync() 19:53:48 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x3e, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900be7ff13015fd6b8c2e782806c850a6c450099798ae4d9f3600000000707ba3aa98382e4349d7393f1b225ab637f2d25f1f5fba5e456d33ab593091c2"], 0xd7, 0x0, &(0x7f0000000040)="122a514c0e3a7b0a22853c6846a985eab4db774212db22c26b2cfdef6009728b87ba3fed14c5bceb5f858fa3e1dbc37a84954f6c2f126b37ee6d90bf77cec13c6ddbe3cb735e6c5bb99384ae94bab0178bfce317c8a2e905e962550da2ce2f2b3ece45050bce71ab64fda631fcde3e020e4cfa9c9ed230beb4a2ba538e062c55bcd86c4fc2f5b975fd45b4f219a00eafa05f11682ca916f74f515dd704c133af0b9ee5ad5fd392856314a4d9f9053b769419a31c542d91b522a423e5d009b176970868ba9b08db74cb86af7dde2d142f2487f47e152045"}) 19:53:48 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x181000, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000040)='./file0\x00', 0x600081, 0x4c) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) chown(&(0x7f0000000000)='./file0\x00', r1, r2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 440.534887] binder: 5827:5829 unknown command 536872960 [ 440.541075] binder: 5828:5831 ioctl 4 20000040 returned -22 [ 440.543027] binder: 5828:5836 ioctl 4 20000040 returned -22 [ 440.578385] binder: 5827:5829 ioctl c0306201 20000440 returned -22 19:53:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e548c74af83e6f1967e363afadc832f7fbfddc00"], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7, 0x79, 0x10002}, 0x7) r2 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2}) 19:53:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0, 0x6228}, {r0, 0x8000}, {r0, 0x1000}, {r0, 0x80e0}, {r0, 0x80c0}], 0x5, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7639dd946e62e0c29e22a21254f4b999ca1da3c9fbf034dc25669612f1f8388cf6f1c22cc66c64fbcc64d7a47c7fce42c77b5f0914473a23eb82a4a99215f9d79e1a7767c11ce9099dd7582462c8c088ea3f0ec0717387387840dc18d2e59485c398d84514c5dad30ad41c001642dd2f34da"], 0x0, 0x0, &(0x7f0000000800)}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/77) [ 440.593703] binder: 5827:5848 unknown command 480410891 [ 440.593815] binder: 5827:5848 ioctl c0306201 20000040 returned -22 [ 440.601515] binder: 5827:5848 unknown command 536871872 19:53:48 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x45) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) stat(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8000, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@version_L='version=9p2000.L'}, {@loose='loose'}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@noextend='noextend'}]}}) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:48 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 440.601524] binder: 5827:5848 ioctl c0306201 20000080 returned -22 [ 440.658826] binder: 5857:5859 unknown command -1797441162 [ 440.669523] binder: 5857:5859 ioctl c0306201 20000780 returned -22 19:53:48 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) getsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f00000005c0)=""/208, &(0x7f0000000340)=0xd0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r3, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) [ 440.675401] binder: BINDER_SET_CONTEXT_MGR already set [ 440.675409] binder: 5827:5860 ioctl 40046207 0 returned -16 [ 440.675699] binder: 5827:5848 unknown command 536872960 [ 440.675707] binder: 5827:5848 ioctl c0306201 20000440 returned -22 [ 440.675739] binder: 5827:5860 unknown command 480410891 [ 440.675746] binder: 5827:5860 ioctl c0306201 20000040 returned -22 [ 440.682782] binder: 5861:5862 unknown command 1254574309 [ 440.682790] binder: 5861:5862 ioctl c0306201 20000780 returned -22 [ 440.707509] binder: 5861:5862 unknown command 1254574309 [ 440.707519] binder: 5861:5862 ioctl c0306201 20000780 returned -22 [ 440.735935] 9pnet: p9_fd_create_tcp (5870): problem connecting socket to 127.0.0.1 19:53:48 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 440.747531] 9pnet: p9_fd_create_tcp (5873): problem connecting socket to 127.0.0.1 [ 440.764891] binder: 5872:5875 unknown command 536871488 [ 440.764912] binder: 5872:5875 ioctl c0306201 20000440 returned -22 [ 440.765020] binder: 5872:5875 ERROR: BC_REGISTER_LOOPER called without request [ 440.811242] binder: 5872:5877 unknown command 4743953 [ 440.811253] binder: 5872:5877 ioctl c0306201 20000080 returned -22 [ 440.832473] binder: 5857:5869 unknown command -1797441162 [ 440.838121] binder: 5857:5869 ioctl c0306201 20000780 returned -22 19:53:49 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:49 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000080)={0xbf, 0x29, 0x2, {0x1, [{{0x28, 0x0, 0x7}, 0x100, 0x5, 0x7, './file0'}, {{0x20, 0x3, 0x2}, 0x2, 0xdb, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0xffff, 0xffffffffffffa655, 0x1, '.'}, {{0x2, 0x3, 0x8}, 0x4, 0x3f, 0x7, './file0'}, {{0x20, 0x2, 0x1}, 0xffffffffffffffff, 0x8, 0x7, './file0'}, {{0x81, 0x3, 0x5}, 0x5, 0x9, 0x7, './file0'}]}}, 0xbf) 19:53:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x800, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000540)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r4 = getgid() r5 = getpgid(0xffffffffffffffff) getresuid(&(0x7f0000000600), &(0x7f0000000680), &(0x7f00000006c0)=0x0) getgroups(0x3, &(0x7f0000000700)=[0xffffffffffffffff, 0xee00, 0xee00]) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001980)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0}, &(0x7f0000001a00)=0xc) getresgid(&(0x7f0000001a40)=0x0, &(0x7f0000001a80), &(0x7f0000001ac0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001d40)=0x0) stat(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001e40), &(0x7f0000001e80)=0x0, &(0x7f0000001ec0)) r14 = getpgrp(0x0) getresuid(&(0x7f0000001f00), &(0x7f0000001f40)=0x0, &(0x7f0000001f80)) lstat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000002180)=0xe8) lstat(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000002280)={0x0, 0x0}) r21 = geteuid() lstat(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002580)={0x0}, &(0x7f00000025c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002600)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000002700)=0xe8) fstat(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000027c0)={0x0}, &(0x7f0000002800)=0xc) lstat(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000002900)=[0xee01, 0xee00, 0xee01, 0xee01, 0x0, 0xee00, 0xee01]) r29 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002940)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000002a40)=0xe8) r31 = getegid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000005080)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000050c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000051c0)=0xe8) getresgid(&(0x7f0000005200), &(0x7f0000005240), &(0x7f0000005280)=0x0) r35 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000052c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000053c0)=0xe8) fstat(r1, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000005640)=0x0) getresuid(&(0x7f0000005680), &(0x7f00000056c0)=0x0, &(0x7f0000005700)) getresgid(&(0x7f0000005740), &(0x7f0000005780), &(0x7f00000057c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005a00)={0x0}, &(0x7f0000005a40)=0xc) lstat(&(0x7f0000005a80)='./file0\x00', &(0x7f0000005ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005b40)={0x0, 0x0, 0x0}, &(0x7f0000005b80)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005bc0)=0x0) r45 = geteuid() getresgid(&(0x7f0000005c00), &(0x7f0000005c40)=0x0, &(0x7f0000005c80)) r47 = getpgrp(0x0) getresuid(&(0x7f0000005cc0), &(0x7f0000005d00)=0x0, &(0x7f0000005d40)) getgroups(0x5, &(0x7f0000005d80)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xee00]) r50 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006040)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000006140)=0xe8) lstat(&(0x7f0000006180)='./file0\x00', &(0x7f00000061c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000006240)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000006280)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000006380)=0xe8) lstat(&(0x7f00000063c0)='./file0\x00', &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000064c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000065c0)=0xe8) lstat(&(0x7f0000006600)='./file0\x00', &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000007e40)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)="1bf621833e00cb4471ced2ed1829f89759efbf26a8f117420f1cb1186afa12a514c771d22183041408edd1e5c535ede70b9f3ec203b82de0d2f9cfd5e2b32eba72ce66096721ed758d37a57f79121ea9cb", 0x51}, {&(0x7f0000000180)="3ff54d287593eafa961c3fa1a074abfaf6c52868b86875bd6e32a3f021b075254e7bdb6e590dda325db856e680c5c3e40228ed55bcecad42e2d88f9dec36db7974c8bb030d751ab9607a253668ca3436f351745a50a0b16f1aef28b701f51ae668711d117fbf850cb23d1bed4ed2e086858e13c38c623ed19a3e34efc0e3e39d2d34349372d9f1cafe34c03fb8dd103dac5e4d6aa64cc8bfd028f9b4dad4160e7e1173d245964d94590d1ff5eb1e81a0f36b5917e11aba7cba7f80c2cb012c105d3e3e5a732769a2f2830e9eeca1bb222c864b0582785fa9c67d", 0xda}, {&(0x7f0000000280)="84276d9f14f0365e9db223ca351adbfee706075041879763ed45c08767cdb08d2253af947e26f216e5ad5e1d79d030ba2addd38f38358a98ee6fde9fc4acec21e0e9d6f29e3c7fbb63f0d2e6fad10386dfc39d64983b54abd6c9cf48ec04c20e1a3f3e83d8342262a5dd29354e78bcfe9de2c0c789d74b1bb96c125f6f2837d028dce3f39a00e5cacedb9a7ad61defd3081242e19a9ebc5a91ff798b020b55ffa78e2b33be12c97e028795040e12d02e45beddfc4edcdaa3ff00ec500cf55184767dfac1455263", 0xc7}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000380)="f733b14a5cd29dd5ec114965114cc6f4fbaf93c0ad2c7bfc3dcc53d85d87f9065f3003dd408b17e90fe992b817876a0670111df3295b7ee159c6d4c459ee818068b3aebab8a58e2ac3a77216cfa9491390dce420851263e6c70be8044701a43dc492576d5b04c7518a9a0f92eae463cfc49fc3f3395aa0fb96a246cdf1e5d509c9fdb1a7d1e68b3d6332edef3ec19d4071cad9a177eb94eed34036f8260d574bbf70f15c6765751365fc075ef10db409b0b958cb16e105029a9d3ed3a84dd844d51f192ff13b9bd649ab0396a0", 0xcd}, {&(0x7f0000000480)="ba54fcea0ff67841", 0x8}], 0x6, &(0x7f00000017c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x68, 0x8000}, {&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000740)="df95c5d9ba07fd61d411fb8cbc4af3ebacc7020affc3ddf7732eba96fd30be0cc691cabe32474a5169", 0x29}, {&(0x7f00000018c0)="bb27af69168d9b9a705c52d48309736ddd62ad779468379d48b3b822af3a4a8a2686b75f3d4678fc2900eb45bb289e0bcd8d85de39fbdcb3a24fd69e62eded6a7d01eeceab121e4db8c83fd8602d3797aeddcc9bb2d5253c3dc80dd0091854", 0x5f}], 0x2, &(0x7f0000001b00)=[@rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x40, 0x10}, {&(0x7f0000001b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001bc0)="bd9eeb717b", 0x5}, {&(0x7f0000001c00)="84152cd3db08666236d6cafd19f355b52a45235cf9faddf36acfd342be2d38b93a959ba88d87eabdd9f2a8f1aba9ecccbd0e0a307aab072f1dd908ab1e30cbb36bc6c63f66d2fe938a9bd1cecb6eee8d8298ba8c18498258096f1ea59d7fd8f6f68e41d001576ce9410771d7dd90b22ef7dd111635dbb8657cbceeea239377bc82d86049fe85c671960a4c80bf074f23c940a263a50908e07e34019f667da9689ef376e04399f7502c504fca86fdb5dfb282827200ce63c9f9b7af591ff1f58cd230cd", 0xc3}], 0x2, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r1, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}], 0xb8, 0x40000}, {&(0x7f0000002440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000024c0)="b02d944825d92d3202d62ad3a69675d87d7a9c1e43caf4934f3bd5987ad7491d07a9ee79d9c626828f61ef84bc04d5eeca0db5ec6b1a737090782e6f2814c4641250b26ab8bda9098ca49b", 0x4b}], 0x1, &(0x7f0000002a80)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r1, r1]}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r0, r1, r1]}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r0, r0]}, @rights={0x20, 0x1, 0x1, [r1, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x128, 0x4004}, {&(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000002c40)="0e3442c11b00e1949539acf5d0bf89cb8da8c0bf7b3dc4d186ba0aa9da380482d7413e", 0x23}, {&(0x7f0000002c80)="664e103f6954987668adc2bb881bbf1de6c57a9fae52361b464490177e1679a91f8f", 0x22}, {&(0x7f0000002cc0)="163f6d446b80480791e43f2a6ae772bb5c6be9d09983835c3714a2e32488e32b0bbdcecbbfaa3be73bde4133c0bde58df98acf7076de4139c6a37025a1c12c0fa3824850a2e958e0226fde498390811624cffff0025527dffd282ec7b1787003b9f87164351249f75ae8d7e1eed0e0856de9435daee4a8a1733549212fec6d7d62c8f2723bf8db4ce0e925e7e01dbf9d520ae9b77ab9477a70252a58", 0x9c}, {&(0x7f0000002d80)="69069e88f9413e69c052000e1b3dac1a691e71c4e20c24f6a91e56a300bd123d27989694e2e72a0ff2438b122304d0e0ec9594ad55671bb1c1f662ed34d413d395f824286f1cb9ffeb0f8d66e31b43356aa17e02e0331c58cb36638f72f924bf478457f5c928d092f4bdacc73b52d752927ec7eae603ba44fdc3a3af28091ffe37ad91f5e5c019b68b2c4ab0ee6909a618451a907ad3a1ae74489c28495ca6314e5ebb69b2e335daf191eb315b2ecfaa4dd0ab192259aa1df8a465c0c07c39e6e37de14fca039a6796ae3f104a5f3ef2422661acda8aecee5649277774b90f164eae65f43c8d272b2872b050d98587cdf9e67933abd47bf7", 0xf8}, {&(0x7f0000002e80)="89c6c6ac6116c45a9aa2a5", 0xb}, {&(0x7f0000002ec0)="f1187c32579208d05c85102837370ed5571126a770fc1db9688e9bb17553d4be3997af9aef968d2a2739444649c53ab6ea42476b2144", 0x36}, {&(0x7f0000002f00)="ae28d3a4f7b39cbf9864174c1070257430d34b90759e0816197ef992cb58792179b5bede91da76b01f44b3426168819fc078ce4bae26b296f3a129006de23b346be7cb2abcbba58c86d2a683622a66cef185f1b73ad01ec59b8dcc6bd3d355b71ae6819ab206e281636afc635c46302221d0fcb0f284f928c5f26fa864da7bbd7747640f185e8ed9f2248a89a5eb2b64aca23fe9cb2064871dc3cdc3e2f36ee7221d4ee32f789a3428d5922869aa3576f5a347383565b26b6964ef1521757a46b3dd9c68c1834ebdd3d7737a68104a3ce32ce8299a92a7175dd015a5611e448140603e09999b6c211e4e6b0e7e51eaee9aedfc84f4d202b966da0be4e311c57998a59c0c38bb00329237223090092570464c7add8daf2e550712d53c77681a1edd3772d38ab7dd71d76c7f08ad0805948b982683c09dff6d5a3d9a57421e7abfc7590f622d9650c188372d3c2371b31c20007c798023d6574e7c3493b8373d3963e9aa1a2757891db0ab1b324eef178a21bb64847ae6233a4d99cd8cd6556aef69a528f1791b548c1d839e37e3b7b2cd50f50e4ff61b19d2d7b6c739b2af0b299c593334cf8c391a124a0e7eb14bfc15006838de5e031948a97072bb72c65166c5535eb0eb189b8d5cfb5020714f4525948388b68b1b2d6bb6783d333be44a311f610d38f49e2d0fad0c1025efc05d37c366c1ebe324885a776876e3823761003c4853f0c082fa2de1d98b5bbe699893727e1ecfb70c37f8839dc0e9f73d6a3b34a1e71d834fe51f6e84452ccf7f3976a3ee5faa0a998c3483fd13ef04cbc26d2226499cd6945c390509d78aedd049a2f80b9f5828674c3b04d0a34e8176f86244f3a5742c1ce36fbb65c94404deab6e0dae7a1fb92f6da39caa3de78bc811913fe099f65ff197437f00dc2ff457f52b6738f0d6182bb1482d46840c1a1fec1db41c20cb0a9ca89fa47d392a64187dfcae8e116d05ed51d5a8dfb5e251070316fb8102ebe540847db3a6d4ce01a2e87236c2045035e4416180cca3b5fbec0dbc6df993a0151af420904002e21f6649f6d35f4bd95858254bd37bcff3195ea88055124af1637d59b0300a90e08db7ae56a48380895673ee6392d1efadd139af4c710fe6e05206ca0ad0f61728fa42794e671dcb81b02b6643f08329a64b13017ad6e2f7f84577baaa83ef0b9241eeb95c5b1fab3e6ed84ec31311eebb9bb349e1489418d7132999de7326013457a6e63faebfd132245a72eb8290a140ad1efc89a57f8104d697a144101bb2ebf0915c9c29666359935e5ff1801a581f4e6f16bd84779b1e6d69ed3a7f5b83a87dcd3c0c1e3195a1eee0f3f61cd910f261a252e0e558a938c48e0b0280c41204d1689124d260057dd1097bd1178032aa246c9152175eb47e6c89715ee41f04876dadb95eb27c4889bc2eedccd6577ab5912b90e55007941a6592733895e1f9813e1574a8e98df0a8f47dc60321a2c602a6de1e74aa02346ba1f1014b5fe2f261fc165f44cffac572fb807181830d2a530d457498af7556bf1fdd3b135001a91866a94ac5e198cedb1cced13212f9d28ec9a2eff5a5af0f6bc06906309d9f6cac243447bc5f6763d0e44b221d7c3310f871c2e11be195dc5582097ae06fc7bd70c0e794a077052a8c9e62cc2441230ab6b6b3ff7fc272023aeef09864fb57a445ef98120ec823cfc486b9a5f10b22a9041e76308100c3a5c2bdd250af5be61e14d00d10608f607862673232a7adbeab9ecce2f9d0056b56646f694cfad2f3b027021a97f98b0835cdaa1dd19ea5692b1ea759cb6e7ad247522564ce92491082decd0e273f7461749908b7681c174bc34b88412c6f29ec79d6e978fa7aa9f571c7a48f515436ae536950e35281180298ed4d0ad3cc3d639bda8cf0a001c286ef4aba573c47f7fa4fae1845290f8f20f4c2770e2aa0d72b893159767f023ca2d95f4678f99479253866dfafcd98018c4c3ee5d380b8cc4647b6d6af55f213935c0b3bea104938ac178c81e84d6a64986e0884c2616b836ffd7003580d4f134db64ca56f105a9e6db171133cb4ab75e91240f839795aa3e0fbe3ed1f9818180c5601aa04b6de40d2f6c91c30bdd23ffd26cb32cd96b6e010644efa097642c25fa99c2f287e223769c5eac3ce5acc142a12ff9718d71b702727a237975851fa2811a8ece366e9a00f733633195aea6b5a02e48020ef0d981d9a392814bae9e02a4f95b41a66fecf2f6a4bdf644a11fadca0963336e169b3ea2cbff3c14137a01c89059b0768854885ed570979bd76593c3b81754a3d8c4e8c15b4418c7dbff088a233d8ebb7132ec8d47dae2079a0a502a47f3e64eca397ad91da57e0fa2c7bf4ee4954441850b292b943364731d9003de76a50af82bfbf8e6c366abcfc9e6c0eb1d5b1cf874203514b1a3ed58a1f49e6dc80ee9565b509aed971da1a6c514be29537743ff6d9c106b0e02e103d154c2804c7c38c2097741c2778d397112c99fc6ee7b2c76e0ebb0a9c02b1c62eb866cd16604f2ea7419539a4b3da5b335624b96f0297a9279f3f40ebad5cdc886373a32d2f1f1c6466ad45d2310883c8b6d1896fd3f291807e6d107f026b5abb67a78cc81b77adea6b6a2593d9b42c5f1c04ab04a2b0cb2f6d72e9b8d6ddc560e6a0cb3a305f6676e2578fd812bbd70c0686dc1b098f9d8ab1eec3251d6ca9a9950ab4d42a75045be000a79ebef6a99a239616ca490e8fb92352ea17e2bdaa61122e14e13c53281155b34d6d4633d649f35fef88a1c18df67aba0e3d847c94cb8cbe60d029e4db6f5e6e8d83a490bed7c7c2224522f8e829dedb4114b921a7b26ede98207b0bf4f8c22009bd878f840250a8a83440b1d3d658438ba9a861210275c50805f2a91433f17eb97a9f5bbe1641061c19bccf5f8945af46aab7f08e07a93f37f9683b1104ca803a24d9cdf5f4a06fc9a4d834d5fba439a30fef62c65608b3f855a2a08948608fd25f7a0be29d7ec75128f844f6d022d52f1057a80ff9734617aa9bbb87e7a094998bef6e35165a0fb1742714c55016f2cbc60b2c16c2776189c19c297fab22ce88fd4d31269289bf5a4a8844db032b0f6af27e2240ba95ff37acfe7ff0f96c0e7faa0aa4fee2022fb8197c44bbad59daa0a576bff04da3309a70fdecff1a4506cfc27f11fa53bc156094a9149bef9d26430a32c40a5f7cca66a28486e58cc08b6d1c6b991bd32e62cce175c02344ab54d94cf3cfc05e028e901384ef349395e7afc213655ebf6e8477ddb7c131563643c9d3b974e6de5f27e29c0851351493f389b885d15de0528cd56e6ea831eac5d1311b52e90a0a41c974916864546c6fc1601ce38673f3ef0521df08690e97046a2bd51141399a034cddb17827eb38665b79e2ebb2dc651d2db6194145e22726e17f46e8cbf69989fe3ce19343782cfd5cc4fcce8ff5cc9301d05cb32ea9fd18324e8a68a8ed8d3a168875c2362f476d51a344a7aa815cbf4004da5cc9af5d6b55c65688cf05e583ce69e978e3ba9e05e9b2b3614ecbf7d37f4ca3009a76b008092ced2f29ba8f5e71e98b09ae707bef45c50101db5e2df69295b0b1143f08dfaba34fd916fb2e01424408359dd178f8f8c11f80ca18b4bdf21631d412e6af4da325343ea831ea7ecf55a0c192318fc4c3c66e64774caea0826d0495f07b13f0d50842d92c84ccbeebac517962a0f40acf8eb8aad7ec5bb3eafdb4433b3badb0fa6a097e0588e9b8f70a14891c9d0016bde4cb31cf577ba120669a81d7b131e8ac0630d379ba86a555271f545249ada861055914ddc0970853a31415683e1d65a06cb35f95e5fd808c5772fd3d760a8ceb92c8964b456c548b3e80b9b806521d9c61fbedb6a3f5a3d6eb9f96e4b04ff204e1b5c4bee660f4354290fd3e33d190d1afbee0771043595c41e8cd7f45987f9106791e55bb444fb8bb71d0e5b19b8b5a3843234195f32c2d3f932fa20dac165e56adf4d8f9fe5dba5cc14cf04b2a53999e38df7117bce45863141dd32c2cb51d66a44638fbed00de63feb55c82cfb607cef8326ed6c8790725f28b7a7d3c9f5df173dcf500b32e8acc22119ca74b49e41b82886b35eeea43fd82a377cfd09460bc7e6fddc5f76d2fd5c1d6ba73d443e0919e4017aeb7a383bc6eebb6ec442571658b02305a0d127ac495c7863d0f7ed97c58421ee701607de50b786ad5addfc6bd5039d288d502a16b60dc0bd47b75b8c1a309cfe649b8323cb6a8a5f16dad967f4cadc91cc12259f02de5780bd730714bc981bb57705e3016d6d4766a302e54ce7e4ed544a4452ab9f516777d5ecbcd1b6f210ce3f65ad72e7da8ff2d1eec2f9edfeda59e553431089c5ddf007902ddb5de7df9bd7cccc7a3d5a4078f5114054dff86ab69eb3c30fc64ae94843435e10a95cd00c85a5fe9696dac25d871157b09cfd4919bcc5b0fb7d707cb835ce842adca8ad72302f6739302c0e215a0440b049b4ca020f3e10074d19489271d74ba94fb26a0c843c6c2d09654074a3897094ef6158dc64e3a1088525f67c9dc192db43eb887fc18f8bfcb3ef8687b48de0d92272f2e7a9aeb5e312846b41785a849cf3b55c2bb41cd0db6f57d790ceb385a84f273614b87691eccbe8e59d7d919b4c752c66850c1164a7945802f26b33836ca5fa6415260c301442c3f1294cfd19a082d1333d2c4309c9db6328d81094a5e96b2ba677837819958e836af524abb4d2a8b96919a412b1fd09e800d2ef27de4927a9c635ab1b10f58a113d8d81f22c3c42d7797efc2487d19c9e3f42d03c63c5b29eb894518121a5b39525ec063cb4dbf2c116985c8fa9ba2e77914789aba3ef0a1a283d581bc5334dff30b0d6839e343e30d645d054c441592a5c0b5dc3ada5edb34228ec8212ac185f2d6d7003f66028164ec563f555f0313ccdca369390ba19034b83a2ba3c5e1dddba0b4c52dfa8f1a93651d64dee9e0d5a01684ace565c83f191ab92971a2cf8cb0f04d4fcbcaf8c50a2119ee0a268db8747b9dfd4b7e40ca832075623cdbdf40cbbd3ea58db58e0d7e8e43b3dda90cbd9714c073958eea42ff9c08d5669cfc7ac20708f6c20b01a082a1b03169be50008d271cffe03a99d855b352bd9b1c4cb6178be45f63c9ad1435f4d3b8e2c8e52c177d080674f0421202bb3c34ec017230416053f8d1e2ac7d35ce7f9fef419703397f7cac926a2dacd2afbfbaf9023700c6798e7a77701c6e9b60ffa2485f28d9e6825d216e87e2ca8f764f993648a8c4262af5ebbe45702cdbfd7cedb18b976daaca48ec7c4936d61200b8b24e0d370adf50388cabe6d62c6857ba309e36c7a2c0f040f9d03195dcbbb359fe6553bb755ec733f8667a61efe0e15e80eb42382494fa28e55919c00d52d07054ff9278ed1f3e57b72a00bdf95180396e210819d7a947061db220dcbd3bf9292f110ed25371ae9a69bd65ca4004bbded6e31c9279f4cef2415146fe7402cd281a50357cde59640135b4a88d6040a57569071461cce53d3f1d952e295455885497ba26f5243fac4ddaa17c1d5545d5806cd08ab8a5bdc26a9d57679466e4ad0501384829ceb28bca37f9bdf5c43e6df1ebd9caa1b70ef56b0c5f0aeab9d2f511b1b1a0013cb1bfa17fe532b459617e3997164f128cb8542dbb281a6e5bb621158f080dc4eacb6a2e14393b76474098c9b34df1f4b01f57eaf3ca9c8879af3ed87784d316baaecd597adc1415a34018b9a5427ae6603614a46ed3c55595116ea97faaadc72bfb6bfa684c5b9b25f9a810c5b402a645c9c3a791c2", 0x1000}, {&(0x7f0000003f00)="f1b18bacdc3303e5f5775e0c3317423b7023585d0718f2e47269f65b80ce85a4e45bbee45078b3a94269411ebe0b490c08961bbb3340ddeef15af7614db4f4721180b508b145e7552d8a23e2cdd2233ba8e3993b3141c7e48c38001fe2698cbe1df24eabe709cd047aacc6b92da95808160895df6fc08948b6f5ce8bab7293954b77902b8c072680b843f354cfd50c1e1f", 0x91}, {&(0x7f0000003fc0)="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", 0x1000}], 0x9, &(0x7f0000005480)=[@cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}], 0x40, 0x4000}, {&(0x7f00000054c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005540)="cc88693e6a3c1e59e65deb492949e0644553fa36ee8729854097201591e8fc93536a4c9994ada747b294a80f992cdf5635c9191e48c847409ef5b7e69fbaa0d83ed860b9077f1a27191bce7f431d2d6f43c135de34d9d618c0485e5628780e0aa12eb79e33a1e514cb2a470da2400e03e03ddac541fce775a03699d238af41f93144d9419f877592fe1edbeead6635e483e368f40ad8f170cd7b0815fbed7fb7bba5fd284b74e1", 0xa7}], 0x1, &(0x7f0000005800)=[@cred={0x20, 0x1, 0x2, r38, r39, r40}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r0]}], 0x40, 0x4001}, {&(0x7f0000005840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000059c0)=[{&(0x7f00000058c0)="e7f13fc26388be5b2137f570c58bf889856ae6e0f763e04ed5e61d1843810b1f74623097343c4f3a073e4dde946254ba844dba", 0x33}, {&(0x7f0000005900)="9dde21a7342e793171b8484d4097d5c8b615d7a14aad03c4b2b2dfaddc60838e3285a3ce79ff40553cd9e7392ddf64bc1d885eceeab42a506f74313f498fac0b1e18781cf6c748cff76ca3d99c19267b432136b95df26f35da3cac184fc422a91f6f90f6853e0d4dc371798dec888c742490eb304146e791014d7b99e21112617095f31440e747025d2b2357ff4dae583b056d53c12ec740f739a729de0c624ea99d06733482717a", 0xa8}], 0x2, &(0x7f0000005dc0)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @cred={0x20, 0x1, 0x2, r44, r45, r46}, @cred={0x20, 0x1, 0x2, r47, r48, r49}], 0x88, 0x80}, {&(0x7f0000005e80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000006000)=[{&(0x7f0000005f00)="2b5fa6d5691d0ffd3124da02ff0074c165bd7e8e9ddb3f5e6799cde584211f475604cef83cfd9a7db4ccca64047563651f1029343cbf9e0f8aa0500184b957ceeedb6cc92ea6f8b2e471c9f1d20438051f6aeca4f93b93ab3551d3b4c386a217e001876a4026dc52e9912d898ab1c29483057572a1ec593634278471fc4dccaaeaa7d54b99675fc712ae486374c74e80d6c2807eb64ea153431eb03649f2d44261d77a", 0xa3}, {&(0x7f0000005fc0)="55654ec4c93b1ec7d66799c4eb74ae57aba8ab485f3554c69b9b44a8bf53878fc55ef20a6b2873f6ae09d503384083df", 0x30}], 0x2, &(0x7f00000066c0)=[@cred={0x20, 0x1, 0x2, r50, r51, r52}, @rights={0x28, 0x1, 0x1, [r0, r1, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r53, r54, r55}, @cred={0x20, 0x1, 0x2, r56, r57, r58}], 0x88}, {&(0x7f0000006780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007c00)=[{&(0x7f0000006800)="384674a7c68c33687310f26e5b13917057413171fc9b7f706bfef4af4601a6a789dc53fce1167a88725cb06ba5a8b5abbe19208111f8b2b724eabbceb7f36b4c8c8d2486f1f8433b2adfb842412279341b29f2d9c8a2c9387760253ad112dc164fe1c748a0d1afabf559a19b3ac1195dc90be9b78c2fb9a46b545814c5", 0x7d}, {&(0x7f0000006880)="e28b477d0e514a6ea3b70210f38872d65f16f7e333ced521dbbb5f1f33c46d642faa7f4a5ebd546febe08a5a2f67046a5cdfdeb76573bcf71973851701cce8e4804686d4b1256cc8ad35db9cda836c12591e0e50e968c8963c43fe9afddc717aeeb87956538a39ccc0", 0x69}, {&(0x7f0000006900)="af1da77de0668e28e24bf56d7bac35d04a34fb6030ca2f637988f73bb7d9b57d0f74a4500961e2f5c50244a1cb91d00cddd7f37c32d9c75b1029adf936fd2537c959b3bc640cc799058839a1b48a1313adb1ef5eff84999986e9afb8f0649c96", 0x60}, {&(0x7f0000006980)="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", 0x1000}, {&(0x7f0000007980)="b312039da17b8b72ea7b3f79801c8c461889bf5e971c7d0d60f04f0b6f38b264c2b8fdc81fc2669bfd1cc7b284b2df22de2c1c03cc260a02a3d085b56e75b195355b1a8d8208584719f2877cd899e383e24d61c2dcf7c9e556df3caf9661a390f7225aecdff9f24e47e1212d1ed06cbf216d7edd7c0116e06db5a78c63176a789e55b1c8b4d150ef7b659cb47ede92b962805435804b9e7d85d34e40e05a92f4505c76186cc2b24b2e2a1c23c0f2df1286d83999a9c4fb44cfddf3c6b63e9a3b4f20a749da19f5dda11a", 0xca}, {&(0x7f0000007a80)="bd950866ebee60b1f18648529d6ce2fbe0ea3ff973d18306888ac711356d9e4b93ef558509da96f806220fca3d361033b3ba3067a00ac65aa66b9333c3459de14e248c1e37d47b0d28305dd9e7064f8b5b2a", 0x52}, {&(0x7f0000007b00)="efc99b21021c761c52d34ebe5093d6ff96f2970eb15e04672f7b3eb27c9819a9790c1ad453108ee2773a66b6af0e97865f1bc0d04aa51e07ccbaeca4ced884a01af504b055be9d3b0b20ff2380bc9ae38a1739266e2908db85a18314f5585c77c06f4049b4ccd19daa46f5d825cc6d8163e454394c736d7e2f3eb82fe1bea2f6ba52da517b98b3c364bffa33dc5e9ca23a43a59d522c7ee80a63a2558ca4de5e6674e5ac304bd25c53387a584498487dfe85c11f724c21b66350b53175cb6ac07bbf20859acc4314fceb23f44dbba8bce48d0317ca86b36198c761af61f4", 0xde}], 0x7, &(0x7f0000007c80)=[@rights={0x30, 0x1, 0x1, [r1, r1, r0, r0, r1, r1, r1]}], 0x30}, {&(0x7f0000007cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000007e00)=[{&(0x7f0000007d40)="6d3f30ea2da1ddb177db654aaec10906be7ee3463dc542eeec1bb75b9fb17c0fc423a0b2e95430", 0x27}, {&(0x7f0000007d80)="04d519bc88079f9d071dee84746e6108a041c2d84b9863b9614cd5", 0x1b}, {&(0x7f0000007dc0)="820b336dc05a1e9c", 0x8}], 0x3, 0x0, 0x0, 0x10}], 0xa, 0x20000000) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000008080)=ANY=[@ANYBLOB="4d5307c6d47b3aa4dc730c6fbfcf756e30fc644dd662a2dd7e72d641a4bb8670b7ba90c8c54185431c15b648447e09a3a16f919480ef94c495308596447bc6ca2b91c126f96400cce45262ae472c4011fbc4dd70ae10e7d2af4d76f0c23b9d1c000434100884cc40cff4a1d0384ac8e74a2b034fdfb0f9195ba66fd97cd1e28bb4ea22a24007641fdc73134c423961f74d82572ceec9147b0c4b7cb9d7422ad3ae7704db"], 0x0, 0x0, &(0x7f0000000800)}) 19:53:49 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) sendfile(r0, r1, &(0x7f00000000c0)=0x12, 0x1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper]}) 19:53:49 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/51) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x8011, r1, 0x39) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000000040)=[@request_death], 0x0, 0x0, &(0x7f0000000800)}) 19:53:49 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:49 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peek(0x2, r0, &(0x7f0000000080)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:49 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0xa54, 0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x1, 0x0, 0x3}}, 0x14) 19:53:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2d63d40ab1086a0000000000000000"], 0x0, 0x0, &(0x7f0000000800)}) getpeername(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x80) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x401, 0x5, 0x100000000, 0x79c8, 0x1c2, 0xfff, 0x2, 0x8}}, 0x43) dup2(r2, r0) [ 441.416241] binder: 5892:5894 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 441.425923] binder: 5889:5890 ioctl 8903 20005bc0 returned -22 [ 441.429504] binder: 5892:5895 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 19:53:49 executing program 1: socketpair$inet6(0xa, 0x7, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x80005, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000000c0)={'bcsh0\x00', {0x2, 0x4e24}}) dup(r3) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x8, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)=""/8}, &(0x7f00000002c0)=0x78) fchmodat(r3, &(0x7f0000000000)='./file0\x00', 0x40) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)="2f70726f632f7305732f6e65742f697076342f76732f6261636b75705f6f6e6c7900284260e760f0ec3b2c59c74afa854548a9cc5b5415ebec9dce25f2a0b6e2d3b8be3a96401dd3f60c0585f81d8fcfcbf1508a95eac8a465e1ac614e9e2067097fec0443d284ffb03b84decb22eb8185d0782b90d13050aa188547115767951fac277368c22b96a9052c14f1f56fd3a9d4d38763fbc9441353563b82fd118b43d1a69d80ccbdfc010d8a08dfbe8d18884e9c3919d0f84b4f4b706f965cf58c6df001964e1038cb869e9f5f302e8fce0c5c2f014a5712a14c9f7c719acd7a", 0x2, 0x0) r4 = getpgid(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000300)=r4) 19:53:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:49 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0//ile0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000080), 0x125012ad62336358) [ 441.461681] binder: 5900:5903 unknown command 181691181 19:53:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x90000, 0x0) r2 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001880)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) r4 = getgid() r5 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001b40)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000001c40)=0xe8) r10 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001c80)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001cc0)={0x0, 0x0}, &(0x7f0000001d00)=0xc) stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001e00)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000001f00)=0xe8) r16 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001f40)=0x0) fstat(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getegid() sendmsg$unix(r1, &(0x7f0000002100)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000000c0)="aa5845edd77fd1cf5c610b0d369e4a1fbd73e0c12758954e9f96b225a78863eba79d704c02cccd64c29fab629100d652d0d8cc483778931fb2264833753a2680484c6fcc05763740012102d4bb6d6255a77f4c58800e734c1f6a615765613cf061ffd950ff6b185d01a9f9176efc823a65b4ef480df0a8b5f7f0169f4443fc47298e381c7fdf20d741c8044dea196a5319e388137ca259f78e9cb09aae4b4634ce010207e18fd51dc6a62ead73a03250c55bc6b749c1135b7f16b924624a5a3abbfeb570a29565e755b99bc342", 0xcd}, {&(0x7f00000001c0)="2ab32f1e837d0c667a126b9bd4bf117790cbae2e83c8f4cbd97ebf6ba98746ec283ba05eec5bd43ed7ca2e6194da8cfecae90574bc525c069bc3d3484c7aa24f1bc55b9bcd019c5aa4da317e0b24797c7a539802843a95e82438c53fa4966ac2edd5dba0bd0de3d57737d84699b078f583309ebaa0c18fe11060b6b3a5dd3da908311c7fd24aa741e3296b35ba4fd27a609d603eea51c7d39533be636cdb22f5ab3c260d270943e898ba4203fd352cb60710425a95d6bfb06f9b4df7ffd518796c8382026ca5defd257b468956e20d05968ea796", 0xd4}, {&(0x7f00000002c0)="a9737313b14d16010135d7f5a6472e6d51ccc8bb588f9fee23ff7ad99cd9504e5056cfe808e6800eb389a9eba950074fb093adc9a601572d919094709b9c126c2cec13797c3835a87e195cb9ba2ebbe1514c10d452ca571939e9a5dc9ef66665ec36b0c7f3a07713efe1676d", 0x6c}, {&(0x7f0000000340)="d29443bffd0bc0a93425d8f1a795cc58d9f2b334653699a9565fc9c286ff444bfd7875fa302820319d8722cd0a275f6fb573fa6ef4185a3f4b5f02221edf190b822199bbdd1305cfe4db810a5460760957511b779e4434796c599af138d47d226643e616722be6e30bf43e0e9c49ac730ff3d6a7ab3865a494fe0b7f86e0dd8b920d6adf6295e4806d3afb98c2b8f24f08e2dc1fff477e1a45c44562ad15db00160ae0f693de7508b2783ef196d7cef7", 0xb0}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000400)="fe3f436a39781c341bd3e5d7f2076c4fcea70c64486e5de9d6a9d5d7a21c782b254947faf883a717dc035079401f9a23c3c7fa7a872d46a46a9d7adc0e1a6409044c99ece4729eec8de884630554358e", 0x50}, {&(0x7f0000000480)="89740ae1ed69d87fcad2e4b7ede9def1ef7b2a27606c2353c213356d574a8516a1dde4f4a365d532e2f6bcc8734f96412bc6cde386c96c2c43fa7d7c9f19ae94f4d16a96014b2d1ba2cc330af5f1903a694112cbe9fab816ce883c36204171f5a3640b290f5320b86c49ff5b5ba88483f4ee3b1b99d0bce683892a30247d044cf2e21f18f34ee5349b40e333f4402bcbf010a8f0fb82dc59729dbb8af362fe5c1aacc6dbda416c2e71bffe", 0xab}, {&(0x7f0000000540)="c6f3570b4d6b33060715a5235638dc108530a0adf04638a4", 0x18}, {&(0x7f0000000680)="4cbc0a6fe0df580fc8ffc5c2824beeb0e1bbf2fe7cde3e1b7762fe68d86545e3f4d1b2fa9d4d7e2e1468e8ab441adc7fcea8d6643e5f7cd68e389d8f78bdd8017bf2b8a10142fd2eddf398a58ac6ddab7c418ea65dcfeea6bb76ed49185dca28c434ebba2b9a374e12c08ac0afc2a0f1ef76072e9e4b120f98ba08cd91ead9fd0490dd0ae1fbf18eb285bdfc068e12bcdf3a4de22e55b5c1d7ddc209225b4274858b2b92dead5dd8b63dede78b4b68db1cd39bd5b10707839a0c1ae34f66b1032cfcaf6a67f3acadcaa31bb649f06358366b5b8175a4282be469026e6d3f755e137752275f2f58e252e8613dee", 0xed}, {&(0x7f0000000580)="3382626c93a3bf388b162a1f96fe16ad6c626d09d063a6901ba5098026248d79d8", 0x21}], 0xa, &(0x7f0000002000)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0xd8, 0x4000}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:49 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000340)=0x6) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r3, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="be630000000006000000002ac1ab24da6d6c0780938d09910f3da4e2098cb375c65de4225f30bafcdeff0f0000aa49d55de56ca8ef022f1e6e0dd1000ffe36cf9ca608d4520b1f96416c26b540c11c6b537528015567"], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) [ 441.461727] binder: 5900:5903 ioctl c0306201 20000780 returned -22 [ 441.462946] binder: 5900:5903 unknown command 181691181 [ 441.462955] binder: 5900:5903 ioctl c0306201 20000780 returned -22 [ 441.482817] keychord: Insufficient bytes present for keycount 14 [ 441.526480] binder: 5889:5911 unknown command -972598451 [ 441.526491] binder: 5889:5911 ioctl c0306201 20000780 returned -22 [ 441.561295] binder: BINDER_SET_CONTEXT_MGR already set [ 441.561305] binder: 5872:5925 ioctl 40046207 0 returned -16 [ 441.561679] binder: 5872:5925 unknown command 536871488 [ 441.561687] binder: 5872:5925 ioctl c0306201 20000440 returned -22 [ 441.561771] binder: 5872:5877 ERROR: BC_REGISTER_LOOPER called without request [ 441.562127] binder: 5872:5925 unknown command 4743953 [ 441.562136] binder: 5872:5925 ioctl c0306201 20000080 returned -22 [ 441.679977] binder: 5937:5938 unknown command 536871488 19:53:49 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 441.683928] binder: 5889:5911 ioctl 8903 20005bc0 returned -22 [ 441.684880] binder: 5889:5890 unknown command -972598451 [ 441.684888] binder: 5889:5890 ioctl c0306201 20000780 returned -22 [ 441.704958] binder: 5937:5938 ioctl c0306201 20000440 returned -22 [ 441.712867] binder: 5937:5938 unknown command 25534 [ 441.718117] binder: 5937:5938 ioctl c0306201 20000040 returned -22 [ 441.727652] binder: 5937:5938 unknown command 4743953 [ 441.733806] binder: 5937:5938 ioctl c0306201 20000080 returned -22 [ 441.742531] binder: BINDER_SET_CONTEXT_MGR already set [ 441.747980] binder: 5937:5941 ioctl 40046207 0 returned -16 [ 441.753881] binder: 5937:5941 unknown command 25534 [ 441.753886] binder: 5937:5938 unknown command 536871488 [ 441.753899] binder: 5937:5938 ioctl c0306201 20000440 returned -22 [ 441.770741] binder: 5937:5941 ioctl c0306201 20000040 returned -22 19:53:50 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:50 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 19:53:50 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) getsockname$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) rename(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0//ile0\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/175, 0xaf, 0x2, 0x0, 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x30) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000000c0)=0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="abdcf8"], 0x0, 0x0, &(0x7f0000000800)}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) 19:53:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d46000073b12247ba0b4257c5cee110201370e191a9aeff0fd2978f98ff380d66c6fa56b843ef1ed17a197c013232b64f329591b7ed3df48136ffcfa0e07df446beb0c61dfea147b0d4e6ac73e45cc2be9d4fbd7c60ab87405d5c89684c665b7b48cc6b74e680892aa2c4ef4d2e6379acfebc9fae9e2000674e4086198270246f0c2d072e7fe4d68607d3eaaadd3074cc27e99ae95a419878d430e6f2b2fe3f1f1b216f3983fc"], 0x0, 0x0, &(0x7f0000000800)}) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/159, 0x9f}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f00000004c0)=""/153, 0x99}], 0x7) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) 19:53:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r2, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:50 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:50 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x40480, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x677, 0x7, 0x5, 0x0, "5ace9457883d41ffaf9fab027e5270ac3d2554e58438f53c072ae667aed52119"}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x0, 0x6455, 0x2, 0x75c2, 0x49}) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000001c0)=0x1) 19:53:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='ip6gre0\x00', 0x10) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x3, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:50 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="a10734b7"], 0x0, 0x0, &(0x7f0000000800)}) [ 442.278671] binder: 5950:5952 unknown command 16309419 [ 442.284164] binder: 5950:5952 ioctl c0306201 20000780 returned -22 [ 442.298871] binder: 5953:5956 unknown command 536871488 [ 442.301760] binder: 5950:5958 unknown command 16309419 [ 442.301769] binder: 5950:5958 ioctl c0306201 20000780 returned -22 19:53:50 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x26) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)="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", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000280)={0x10, 0x0, 0x5}, 0x10) 19:53:50 executing program 2: mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0//ile0\x00') socketpair(0x13, 0x80003, 0xfffffffffffffffc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) futimesat(r0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={{0x77359400}}) unlinkat(r0, &(0x7f0000000080)='./file0//ile0\x00', 0x200) fanotify_mark(r0, 0x8, 0x20000, r0, &(0x7f0000000140)='./file0\x00') [ 442.303925] binder: 5957:5961 unknown command 17933 19:53:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="79588c73a9534c781dbaad3ba114cff6d0dec79ae8b6a1e1d2fe909f55ff2da18e76802a3f71897ccba819cfb4aed3e52a67f536ed5f0976cfbd923edf50"], 0x0, 0x0, &(0x7f0000000800)}) creat(&(0x7f0000000100)='./file0\x00', 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 19:53:50 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f00000001c0)="17a8bc6ec7909cbdbde4df1a44038058e25b7580539f63c7b8fe11b1363179ecad2ace9f7699409ce355c94881b40fb9d63bdf9f256cb7f211886963794f1d217dedd3bac06415eac18a55643958d86666a28812465b82373eac0bf679e055eb80eb0fdaa209196240e593bfd320fdb16a071efa402d8fa92a09b403455fe7cda8ba014d63329a4d7b1b1765dd76b40a4be1e36f2901111fd6e324231024e307de5215babe40de81b6fd1a96f6f48c030c681b350a22dcafb2a03f7c91ee63b81a752286f8d13f55c4287e8cd22c678bec6781925964d928f8dc033e52") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 442.303932] binder: 5957:5961 ioctl c0306201 20000780 returned -22 [ 442.304861] binder: 5957:5961 unknown command 17933 [ 442.304869] binder: 5957:5961 ioctl c0306201 20000780 returned -22 [ 442.350054] binder: 5969:5974 unknown command -1221326943 19:53:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) [ 442.350064] binder: 5969:5974 ioctl c0306201 20000780 returned -22 [ 442.352243] binder: 5953:5976 ERROR: BC_REGISTER_LOOPER called without request [ 442.352460] binder: 5953:5976 unknown command 4743953 [ 442.352468] binder: 5953:5976 ioctl c0306201 20000080 returned -22 [ 442.356399] binder: 5969:5979 unknown command -1221326943 [ 442.356409] binder: 5969:5979 ioctl c0306201 20000780 returned -22 [ 442.408707] binder: 5984:5988 unknown command 1938577529 [ 442.408716] binder: 5984:5988 ioctl c0306201 20000780 returned -22 [ 442.417923] binder: 5984:5988 unknown command 1938577529 [ 442.417933] binder: 5984:5988 ioctl c0306201 20000780 returned -22 [ 442.520353] binder: 5953:5956 ioctl c0306201 20000440 returned -22 19:53:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) getgroups(0x2, &(0x7f00000001c0)=[0xee00, 0xee01]) fchown(r0, r1, r2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x100000000, 0x9, 0x100000001, 0x2, 0x5, 0xffffffffffffffc1, 0x101, 0x8, 0x5, 0x6, 0x200, 0x6}) [ 442.529967] binder: BINDER_SET_CONTEXT_MGR already set [ 442.530111] binder: 5953:5976 unknown command 536871488 [ 442.530120] binder: 5953:5976 ioctl c0306201 20000440 returned -22 [ 442.530170] binder: 5953:5976 ERROR: BC_REGISTER_LOOPER called without request [ 442.530233] binder: 5953:5976 unknown command 4743953 [ 442.530240] binder: 5953:5976 ioctl c0306201 20000080 returned -22 [ 442.566522] binder: 5953:5956 ioctl 40046207 0 returned -16 19:53:51 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:51 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000001440)=0xe8) sendmmsg(r0, &(0x7f00000088c0)=[{{&(0x7f0000000a40)=@xdp={0x2c, 0x1, r1, 0x1e}, 0x80, &(0x7f0000000fc0)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000ac0)="344f28d7c568ef9b7a505784c746abf1a0a3b9215259d4e46592d3c407e35adee774102bb74d1a80ca913058f4daf1e15422c19fa3662f703eafff762a814d9a86307ff0b16e05a1bcd79ee1580ad77a4635d25bc55dbb", 0x57}, {&(0x7f0000000b40)="c320441ca6fdebe132ebe58a16394681822bdbbf3c488707224c51041d6a63ff6bd5ab94ca8b276f5868d271cb6f472bc43b42193d36c4f61f4f195eba78943439a8e19a0c9150ba1c47bc10e82939fc46bdb95a8eb059198ce7ea14aab8e44a05c65ca478bd8d9bedf54f96354fb163121982adeaa4bf3df410edfbc2b3afa0a1a3bd9dfdad0f94", 0x88}, {&(0x7f0000000c00)="46b4eb02d5129c83cc60781336918130c7eeded30dba87f3", 0x18}, {&(0x7f0000000c40)="bac4d18788b67578fb03bb111bddbcad3272ee1de5bd002be137e0a8b744758e690cfb5b667604737256e8fc91584d249d697adb479f1181f8095190bc40c7a6a31bde021160bd7c291b516a329591aa0aae182c04", 0x55}, {&(0x7f0000000cc0)="82ad2dbf97c33c71f1acbb33c85939742158b828e5a498102238a50d19bf699bf158e251ce81ecb39d2633bc60023148547d326e81a11baf1302e08b6724efa295845c54bd3aa9198a9cfe31863788ed77d9cb6f8cae2dcf4c03eb8175d51b209dcd6e39baed72f7d9b58fbba5ce1a6be7e20f75098ee4bf6909bc98146ee0cf20d246dfd0bd4c0170c04725c165fad358537c20aef2b7a9ff81641abb0a04bad8c38cc38f7d92f499", 0xa9}, {&(0x7f0000000d80)="bd19d6893ef42eb546579ea505726b65d07a78100ef7d17947e7d8d3cbfb16a382e0d71d094bc2ccb2adb2b851ce27dce90e6f946fb11718b88d7d5cac40bc9d91654da861a41cf09ca12e7b4a48", 0x4e}, {&(0x7f0000000e00)="784564aa600a06ba5f40a532486d0761e36755dbcd117149a70fee4703b89d9d5bd7827b8ccdf53c1dbbb869a0f37d168c822aeb20e80cd8ace3ffdae18d8f0788de21a1d5af84ee701d81174631619d66bce714a1109b26192c5c1b01236216446658924e4b32fe5333acf24a7549eeccb360baa637d713f0bce5c93134223c97def1201f8851460ee0df3a7889f5312bf17d40519b901971", 0x99}, {&(0x7f0000000ec0)="ff653fa6853e45107f588dd1", 0xc}, {&(0x7f0000000f00)="5a56d352b591d11e3603c615a202fc89094c37ec83495e674a01c09ee9ad13ff4c1efb497d30f801be6fc7a6444683dc59005b80b5a0d5e077f0c419cbfe726c54516f564f7c36702927b5485ab3ed2a54114abd2454f22e1296159740782aab2495f5d1040c2f2100fbd9235b0dc1cc7a1e62e07bdff67fc8255507ae4951f15e5463d56cc499f8c14d86efff23de38af14068d3d5cf7f1d4213b6c19f15e696923c68185a96d0a993fdf1efecbd558a3", 0xb1}], 0xa, &(0x7f0000001080)=[{0x78, 0x11f, 0x6, "cd0daede95df9ea0ccb4a6035be3f8ccbd15821b56088b1cfbacfe1928e272a998665867df9c99103a749dbac0c8affc8e4d7b6a81984fe01fd6d6f8e4d7ab4d2589013dd80b75cdfef6325941745f88261f55a01347f3522364e2113cb6767c4410a11305043665"}, {0x68, 0x88, 0x7, "3ac90c6f9e3fe8798a265499a502cb40fdc6974671c41d6c481f215e0bfb6fd8b396f27b2ee18d0be7767ca8e706e4c272120c059cd40ac5f5be814ac99a673c6adda999100ad1f4d454a9a54dea5df61f62d6"}, {0xb8, 0x0, 0x7, "17a632fd49aea86856bc370617dc6cb60cc0474adaee5c3f7d83e088098eff97e56e0fdf1e21b36e449fe925b82a16fed5fb80c9b2c2e21e4791a20898e56bab236c86ab4c3a6c611a2d9aaae221169b626cb09299a7d832773de4b8d6c60be24c8a26f560efbebe3be5e9f98b2bdd49c742bfaf18d03d8064812f72fc111033c74e48eb18823f63081b4a2930ac742152d29b69446cc6a7aef85a3cf601f89b3fae7832"}, {0x18, 0x119, 0xfff, "fcc8a9"}, {0xf0, 0x88, 0x2, "7892fbca60980b4172c63c0ba8c5ca52ee55f97977315db001aad2cdf542438490087080c8dfd3892d20da5c0dc63bbdb7d8f50b9f46131897346b9b1861b74f1877b1aeaa00cda0fecc00d9c71cfffa9f3ce75051146ef5ae34bad7d01d9f17ebf342307d00cae59b3c0901f25514c358b3b5b2948cb6721c0e3f21af4867fbf6e685a53560b5775fbf328b07744e3feb5a8944c00ff9d94a4444fcbae7092cbe881bd02ba2efaa0d898a7bfa6ee356d616402f2fa8ce10cf636a88fd9e5ae4b5cfe4ce8f5c89939f29e23c0111fbd06dceb9ee7900d4fd2781f7"}], 0x2a0, 0xe339c6bd2c0a3a2e}, 0xfffffffffffffffb}, {{&(0x7f00000024c0)=@can={0x1d, r2}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002540)="cb22b0ba90b6ff8b1625d1db1db49ba986c6d35d69a71785220c7f4ad1b2d9a6bcfcab30c959029d51b35114f1c61f19", 0x30}, {&(0x7f0000002580)="95ccbee7fd0df0759c332410c17a6ebcb5daf5843b7dab66526141db3a584a30d93ecc4a54ac", 0x26}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="6597d450878b2427eb3694308afea9b38388cfc60f50bacde7def47ac817d6549e27b81e7673f126b33d532cdd99f21f1c01fceb34e7fbacdcad418be64bebde38ca003c53cf6158f86d074fb35592c5a33ccf62cc1af9e0393fb6a970d29a864446dc8ad31909732296fcb4c1483dbcba6ab563946c1e56c25afb676537b5178aa019669fa02bfb0bf82ff99c0ac60e0c792e1d3f0802a9310a2e2ce1fe02e2875bdbd69775f9e335d1adbe0c37f98f19ca38bd953d67cb93af9bfd416cf30c26b9773e76541038fd1e44f5d7bdde9b969389bbd72d99962eff8cf4859531d5443c9cdfd7f266a4a594241410435bb813dc", 0xf2}, {&(0x7f00000036c0)="47637096c4073effd3b3958d16825c9ff77e8a05dae8106f736c760936a24128bc059459f15a753aa768a3bb681e14e01c0818e7bfefca47c7e06a05647eea59ca", 0x41}, {&(0x7f0000003740)="d4cdffd2ff2c5ff262d7355dafa387655c4af504542750bb25110118653f9432252a183b588c095412f45fdc755d2fa7ca126670a44eac52e64e0d04d40ce1b2b0a41f0c5b1d39a257615f3b40655ba461c1a0a251f9d37842f433c9e09776ac4be6eed89b12a78150cc7acd4fd884167c043655f55a2ebc493a8b55e95960f01b8aeb08ae13acd6073f7b", 0x8b}, {&(0x7f0000003800)="21713dc201f7503fd3e396e1c275c5c406fa2c9d", 0x14}, {&(0x7f0000003840)="92d836f3eb51863f9484485a0d29c10a4b9af2d5a5b1bf22dc6f670baf9a8e9554d906ccdf548c6353305a5ff14af38f008b76668ca47344a84481da0634ae7f40be4b1b6cbf290403428c8ce3d87982d11b19f89a734f0fb3fdec10e2b9a50365555ca8cc527897c374d723bf1595f7924e7d10df31f5d29d0d5fa0513a406bf0ae082f4221bde5519ff163bb1e5bbe49c55736bdd89bc426ecc518fc8ea907e138bb2400f00e062b7b48fe0865edf84beaf41058bf585d4b70286008", 0xbd}], 0x8, &(0x7f0000003980)=[{0x108, 0x11f, 0x0, "cea5b9ee3e8bf0a56d258d9bdc996ad2644fbcbbdfc6c7f5b5018f1616280362d413b286a0c9f650689072f5ded3803fc8ff1cfd5fb57688fa2081dcdc656431f538963cb72ee3fd02f8cbb55cd48c4a033e33f0362d99f4b82d0d9af974e560eee46b3c546011005cf81fc420e86dc22a84f98e8c42f86a72b25deb831e9992120353f375187b29b60253b2bfda70262212d7057656b14acddfb0ecef8bf052b5884dc9177599b760df2f69d90bd848ba831dd4f76601139ef6b45272948be9a62c2250da631b7e3879c4ff0e0ea585bdac79d1f9f02dfaf125f6b0a442f4ddffbb7d734fa919262a656ff860f61bd4d2d664c0f7784ae7"}, {0xd0, 0x113, 0x3, "5376145753d9580ac4b2255aafb1e31df8bdf447ca9445b76284691039c8119d77b52c5f2e7219db030e94eb230ab5137932bee1be0399a7c9f0ad36442e24a189a0bf4e5889efcbef544abc73db117ddc266ed8cad6644ece7298043559a3c6087588e5915c553ef2b8628452d5d57c79d074ea670ce7089c735dd9415aab852b7c4ace5f258e4b352722af8919c52f1fc1e5cbac0b677b3d41e83607357d50e31c23a0682c56fb8c018c5c56969fed441da1a31e41780cec428299"}, {0x80, 0x10f, 0x2d4400, "911e55ab630f267f873e627dc7419b9a885e362f4aed12e8c86e4135aaad9153d696a4bee2c9ab51e578a3fc326d381adae968cdf70e75882918680292c36c8f49c8fcbe67c260821c79c7aa03c54b136d0179b707ba9e00521d5226aa56d651c59f477e96651a53730aea0a3a0f"}], 0x258, 0x800}, 0x3}, {{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000003c00)="5900263b1d5ea537a5b18ccb48ea3d3c9fd8e3c5676c6ba9b737cb64f9c86f4489db694e326e07bdf283c3544fac861156cd09cf8b88b5aae82fff713ee1b874787a915230598123aaa129dcff44e820afcd11038814bb0ffec55c", 0x5b}, {&(0x7f0000003c80)="afa90e6046f29ebdc35238bc84d35351395de483", 0x14}, {&(0x7f0000003cc0)="fa0141b7858459807102b41e9d712bb1626b07f5954e8c3c9f6058d73f4015fdbd7b3086819571", 0x27}, {&(0x7f0000003d00)="7b8b50368a92143da2b1c2bd9a363ca5a19e5db5a81e2d24359ee4095ee46ed658", 0x21}, {&(0x7f0000003d40)="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", 0x1000}, {&(0x7f0000004d40)="3cdd9b4da899c502686df1b829e27c6a06d93d9a95e76ad1b219b908bc8d089ffc21f843f8d521e44dfbcffc16c7a5e69cde1154a7", 0x35}, {&(0x7f0000004d80)="811f49b7807350c04283c285b115ebdd898f1dec2c4d159e552751b866dcaae0c06e59dedbae00855d678288b932e4a84962801549d430dc7220cb324c8df71bcfe517752a230204d73ca456f03c08e4cbc4c20073bf7ec4c60bb66f620ca653e8d135a8ffd339bbc0cdf4dd952856020d874bb5d81da8535f3287f2066a6b1180034d0521627eb953741f2078dade30", 0x90}, {&(0x7f0000004e40)="2f45099aebf8edac34d01dcb32a33f95db61e688291aab10f077395e3e9e6d58cb6953812e4747c227cf5fff26c834c7e6aa671fc9eff32f2451df13441bf3c5706b8a5c3715a4365cfe648970919caa73a83796db4f5c5a51ce036dfcc6fd2bbf994f7a29078d692f60b9b871cbcf", 0x6f}, {&(0x7f0000004ec0)="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", 0x1000}], 0x9, &(0x7f0000005f80)=[{0x78, 0x107, 0x89d, "3490ae3f14945a13b8fc739c83e1d8ca3994a2e8cd7a32e5d4c4d6fd2ca1f0caf74422f62012954dd2303f6b15c6dd3c5c5d1cc8ee6883ffb7568e34afa0a40dc7e7da1c7014a2f85a79ab4a7820663aca0af741dca73f6182e222ef637a42a3ecf9007184fb81"}, {0x108, 0x103, 0x1000, "7932879195e3292f07c81b4192feec20959dcc318b08589e3ffbbe53a95e4838dcb793ede8231e4c10d04e3f79bac3a469ae4c6ecdd02f7adcc581bf63893594f3e40e048e79d776877fed5433389477b3ad986e1d0f249a6727b8d5861db0c1cb85c1da005ab393a36f039434e197f12af734e1f05885c9deb8d0bb36546d6725f521e2d13e8f5c28d8f354658e56ad66435bba797061f5521d0d7615e12d01b9c59fedb6b5468983f74addb6653402ad2c2eafd1ce0a93f615d0a0296d8b8db0e4624857edf1c29cbe0ef5b908ed8db8a9c692fa1238c203edd4c3b4a0ecfd67353a82019422463cd5d38bc4f495673cb3eb48"}, {0xd0, 0x6, 0x7, "a44263a69d67286275441d69c06c6734e52b7374fb6692c71e2cbe152650559dc8a5efd1e57052ee972f3d19a48db0a6edf9dfab6bed2cf37ff4e6bf14561a99a5bf26760312554774da902595cf202ca8d1714c5ca032f30d101304103764d9a5083712328e38a4718b896f56c87112f99f068900574abd0bbcfbd582ea194e3b04a5836a5b9ed44041d76fa8dc6612a918d9f90e8ebb2fc3faac0a381922fff1fc3ee225961714915e63638584cd62cbadf4515eb135cdc6"}, {0xf8, 0x111, 0x9, "a6a482dd400e1165e81dcb4eb0701a5acc507299e22527e87dde28da7659ca1c9f76472397495b672f4f29a2422ae8309b3d7bca9496ba9196e2bfb6ab56fe89374f092e1e2ee25d4fd1174bca74b1e9645ac7b0fc7534a684897e8749a49042473c6363e9927f74baf2c5c6f46265b0800c42f9124a4811db8791c4f3ea70f8f02187122c8e766216d6238e98bd859ebf97fafe93a943d7e737fa8e7439359d4aa4d4ed36161c3d17dc2051ca63c6c59ed5df641941fc0fcb852da972d05a327bbe1ced3f6ddc58cccc23c164d312e06e53d0d9296e03bb1d9df06840ef473e0bbd08131c34"}, {0x40, 0x13f, 0x29e, "c58a1c5b0aeb138c79791339b19081591213099d4086eb7c109dd863ce9993da43a0ed878505de817fc172"}], 0x388, 0x10}, 0x20}, {{&(0x7f0000006340)=@in6={0xa, 0x4e23, 0x80, @remote}, 0x80, &(0x7f0000006440)=[{&(0x7f00000063c0)="8d2d9c6d108a0037647db8ffed38755464a2b87437", 0x15}, {&(0x7f0000006400)="9949bc0f07ea66f7424297734151911efbf002f55efcca4177a8c6887b954e6217b646c5fba76d8f4db05b1d88e880d734a40cd020c5064a4dc0b0cd483d", 0x3e}], 0x2, &(0x7f0000006480)=ANY=[@ANYBLOB="28000000000000003f01000000040000460a67b55442db533e2d75ef9209b697834500000000000070000000000000003b01000009000000c93adde7ab48e1bf61c217e1223e5a0a933856716525209d4994e0b36c1094e9c0b98a685e3a062a441b3e92635c66f264cc7ce37ab33825b2c29b1b538d6d048a191579d15df7bd4c7c2f94fe22ec7c8b90007bf876370eda6b4aeb7d549900101000000000000000000000060000001b608e496ff47d3201ee5aa87ae9162e650eb43fd02a0283d14b3b4912133647b8814a1e99d2f1f9f631a4b942bec71152219320b353298f92cc8f0ce29f342ed2e3d56a1d0dcd0b6d31954214993fba63f990a14a09b263c6e9a09380db5bb53803720c6706738671b8273ed32bfe0223551c650b7a41f92765420c0dfc9896ae71e9bf30ec05539cace475aaf3f934c9fdcd180521d7544289c2da7d577c9cc24bc2ba3406c8c057ba5b65f9d7d6572178993b70bbfbe0a852d05170f8cf637530cbdb41e04ac9860b5d5f56945123675cf85ee32dbf2db733a15b4794f435357e47c9c4c55dc83606d8326711cbd3151949525663f6fe5cf9e3d05522e53acaf8083a53be43e16c2a7582a16c628d689d8d85d6bc4f119bb1dad53c2e10505a2b99d19bdb1616104ac54e83c3a3b7a1cb9453bcda59dc7607ce7c1d10575aec95c280a738590710128d01624dc0e9b2e339a6e75e127c83f1146745b1a1e90b1d46ed41022d0a4db04a7dfc012439f94d91a0a9d417fe87a81ca5f7d318377877babf1d7fb24238c0aeff1c14e6fe8df1b48133723e9772979de76b09efc47541a594a180b625b75a3f089f78ffe92b0ffc1dd8bdee49988c5f68351a9ddda26e384908b8f9fcc8eeafd074d101bdc3b5d96f3d0339af72985168c60be893febb9b25d3d2c0c8e34e86e78d9a4565705eee5aa71425260213ee837b49d02c962dfa6c91b16d8936b36b49f675bf2fceabab754ae8a7049af792d3bda897a7a9a72ff0e23daeb3dd189455897554c212f546ec5e08dfa03025c496ac7a81ef34d0609276a856e56d7683c7f3541f32c6368140d5406777bf8ba0dd2fe87bdc49412ca89a6490136ade998f515be007f8c05d17184486ff5689fa5c913348ddba436c2b729ace0d2f2b625f63bee46a580b986d12470f440ec7cd909f5043b9e2625cd28f007eacc807dab181aac353be05e2f09e54e47c0e57edc0e3fb2d38ed9d1c63234c446001bfcb3293341dc032bed443c34ab220610bfbbccc0d67b02fad740a5c4256d65b560efc5cc040b190ccd4a147ab270352a528033f093707b13219226070d47de15d78e75b52a0f1a52f686a278c9116db0705db42c5d9355f9a86ec5595b22e10f856e9680fccfe04a105131ea26a65b67e73dce97eab8a405abe0bb2bbd015a708582ba8774e96087e23b6f56ca6b3df5146d8e9d98fea2bcf70d5fe1921d4a1340e424a9275e479d7c60365ea762cc545b4d6be61ac3a339191f9f22e5a964a1cd87d2034eaeaa94e972805cc774415fea87f70bb19d0001b8c3fa66b4e20569cc92fde5f39f69c1c094330a17d019ddd6e1f622294cf7105f323f3cb5f322d59d5eac1083427867e3dc5383a4acb091d64c206ab6c9638ed7ef2c3768cebe10f0b17d1b30bf4a1e32ea87c9adac86df83d79054c85b5f236617521fdd0de5d92adc87b3ef36216ad4ff2df4eb96c0a40c5ae02f82f4360dd79712321895a048bd77aac43829dea390ac3f08e4424c662601df450a2cbba9fc6d9e6de6b4eb43c6600772fe31be92fb4661fd8e2d329958bd37478a4e4c303eab46862f5dd674a9a3c4ea9085e95d644bbbda51dbccc3408ccebe1391f8ba9c7a940139d53445a9b3e4c1323bf30797eef01d2ce8abc0eb384f7a1241fba09e00dd05cb2e5ba99c69cd48feee006815b61800ee30eabf77af918593b8337c9c5a3a8c1b5e8e0376cbf7b422a8c8fcf1c0b6779cbb5bc28b5671d0ae6ee6af2a9b06006487af76b7dc881ea16c5a2d15b9139d2ba9bb2aea0aa67156cee57fdb6bda8fa46a2d047a9be24c99f43bbd526ffca067adf364b5291c3a976e0003210723e23aeba2cd57358e21fb9620234203dbbd641ea66ff48a38714f4b14a5f43660647659f7bd55ebcdd340233978e400e840de2bdf3dd40a50aae36954d035114d6f456c430a27de726156949142b6e1241f978d1e46c26dc0227de68f81cc3995070d32eb5221d70dbb7e03dc091bce54bab7953d2b83785bcf79d6419ee8431abd2e87693153a5bfc45372d9ddebfd679760f91360072b076637a19af7657597ba2e28542ba3ac48b8e3db55afecc2a8d1fed7a2d940d2b21277d5d1d21c80e39c21015d194a5d59b07f48f3d021aaf7dd84a5e799febed849aba16e02e1001fc88f211377cde7e0aa10c080a6041e75e25fce4803f670ce1b8981148aef819cb2938a8380c351499f8d0fc5f3ef849ad88efb8d8919779044fb5f24f8027e3b347c122fa72161a57920896957807bf01e00fd298b94e640862eaf569f904620b55ec3f4fa1a6bbe3fd114c429cf531638f616005f6507fe05559ca268d9c9133ca547d5cbbe6d32084c4c9a103e0b32894949a90153f12c17e829add876aa3c4b6f92e9038b8aeb4a0138793ce54a4098ea6110b1ee8aed3a02afa30879227386f5476dcd13dc05a7fc10ff0f43215fe985eaeb94a8726a6c5adc85e22a70d3d2b7332d5c9d2593e44e6add79c10cae0084ccc2384199d76bf27af981e10ea0b2fbd04f7403cbf7d727ac0983b909110e0969e09b276f7d8462543d2cf04eaa8130ddc1bedffe24f0c4427e064ba609397dff4d0ee73521e7fe73bef09ef584ff503e623555918641a1457c3ab1160b66ee374d19b1d7e2fc3815f944c35afba4783e01a4278722da8a6a6ca90f9ce688635228ba2326a645ade127f530f335512498d35794f339f9ab85bfe47cb586874b5ba7ca55f6de714360e29e569e6fa8d340f6fefd21d47c3b11a281d95efb0a673ed0cd0dec35dea35608ae5e32a996052d6b389060ec43de93f269e9ad421b14038e203ad3fe739e8ba2cb38d8285d2c713d1d7bb63dd86036e5a1b08f3b9b77f45ea0c4f8f51dca9009c5ccdbc9dc87edfe15ddf15e3adecc48d58f489611bc1f30569f0b322f78b2a37ef940b33f265d8594376028516fb7f429ef9920a968e3b7128182009cd6a6248a973f322a4acb08976c30e5a130f243d09b96c3099537d860f43deb31e31f486d4ad0ee8a8801af1b01a27203ccc8bc0d53394d5b62c031f814e5a2ac5b9ee55c3aac5f7a12f6e2fc1b6cc6235573e51779cbcbc44ca221fcdf25382548c08dc252a7ea02a97af2d93bfb700f0aacc8730a46bc70a60ccc9be53db7f31b91b142c80a1459ce6c38eb28cc2c16f3778fd7f1746bafac058cc0408e6641d0710cdc330cd9e762e9df4c9d6cec4ac038abd0c67b616196c582911e97ce16021e0f5c4becca9b3e50f7ea3ba032f64633dcef101d74b43da8afeca0cb3b60da81d4c20802cf9b5919ec443294b32e4067c1e690493a492a11e23e0691dc732df5aa2eaac37bd7dc8630543825665ef7a42fe597354fb6f70d035a2133ace82c2a7424df4c49ced9e4bbdc2cec0502edfc9301765bdee7e4789cc67a7f26e457f9e5bc4c0dba8e29347f11e639e676fed9a530f243e5cd695005ca214d54b4a70464840d0ebb2bf2bee7779e6566e97ac50b3ed86e1ec839e694b4a12ef7a814f3e18bde05eb24aea7a0e4130808426d784ac0dfbe8287bbf7266c11df01c9f81b7cb0db26c590488f6d11b38a7801c790657981b99415431ab425436bde2fabb2c6f27f261444b29dc47fc2e3040937b4afe8bb46f731da0f2e05c6618ee65c5ed23b11b9a379e1a8e1304d9d1f09f4dcfbbe6f4a2de39ee74a1728311851b9f332facec89656ca672f6de4447a3cba03976aadd66ef3dc2b36f54d3d4320ef0169fcb16111d7a4e522e15b8f6e7bb47500036d756df5ee1a4b4ae75f1b7dc5917b9c42398af5356a0cd436a2c0969c5c13d5556cb72361e0470093f6d6bd1d13643c70246e208871f7620b16fe85b6fae5001ad0185063db1fdba579a759f8b332560fc6e896c9d90196572332b470d0f144b51b515de4e0afc5d9b5b463e142d4856d2f28958e9ee331c8d802673ded22e67ca6fb12326a7c4c46fbafc0d25552b8216bbc3d9045e3f010b37ad8dc7425c1492ba6ca417f29a9bd8ae62f9af90777e2dfa0c5ae12fa56c1e278726ddc36c3af8d695f8f6e7931ceb3eeef7b01a92ecb393180cd6e33d774047be88a55d3f966303a3d2c4cf83df5a26a8c5ac96fe35778719d54d41572a570239964bbe07a0a26154f8054d1d3ac86e0490d893718063d00c71fca5e7def9a8d6be587781be58c82a50727a813761325fe9c467acea8c14483b9a2348f360a45de614cf90b71bfeb553d9bcc2895a80f1ab02b1fc44c54aee2451fa73cc7ba8c85569bb4a8a1eeaecd1f66af7c158e078abe568d4d527f998a8263f2960fb02cb33d8683c6c942fc91f58469147f2d9ca96ba2613ff537c2fdc129e20ab1add51a95dd842b263033e62424fa851f186b8fdccdfff3d734504561f2534cb1c5dd43a7e5b9d72675575cbcc47f0c25d3bc709dda9d11fa751da1deec703cbc46b5a67fd07b2ad85f5e749b719377435234279b4148432f8a74ecdaf0cccb2109bb9240faa21b3a4eaa5b9c72d9ebe434668ff836f70233adaff6f861852f70bb90e515f947a6522410afae59d186bf07fc375f188246d48be34d0c36958c57f05fdff223a1189507b510bee0a771bc793b24dfcb39ba6c8387904a607d27a80423b38fc02e8d39ba5a8d0c806a8e9bd3284216c23806d23cd3e4371c3ae62ed624a3d6d23bd2aa09930b7ad964968ce67d49c6a1c2f3fb27638503ecf6643b6db3439440a27c000d9836c8d0f597845907ddddc82393f20ed70dcf25cb41b841ccdc50de12b51f2882453611c82cf27629be967c6b27065f1ae5fbaff647d4283afa5db0c109b8f587500c5b38b7286c07880bd2989c96849cfeca8f61b43abe2b109bb112917ec644b65bf4aa7a561729569b486294fadb04487e86c9abde5cb6d45c3f0a969f9d0d2f65619343d35fab1be6bf2802ef93a4ee1dd231558b2ae0768d2301e8771eb91f8a04748b3eb28caa9962170881169509e4c4535cf1e0129fe0c04543e071d307e51c3419be984d213cc6d834ca4a716a476b0e5a29294f0dd99eee1d8364e1eb1bef2fa0f944d4b0ea5190d4a3ee8d4cbdaf589aa0c2b4ee96cfad44b3d68ca110d0058c0c4a88637eb404eec0aeffdd56601dcd4200ee5e799270d57290dbe6647ea1d0dfbfdc7b32ee1b6524b8b314a938a7c7ed2f2967452a33346a02e1006a54c4656570c1a69cbef0b6418be35879ee55ea650d76ad65800dbedcca7ab113b51480cc964df7de9bb4e9c5cf1bb6b8bf415c30236ac13c452f891a5227c10ced92ef8f8add44bee941050bad4edc1bd59e5f9a89062aec61e9f0624e18405fa15984a7cf528bc7d5762172ebfb840046dfa584fa54cd954b7d41473b62318ccea0478168600ad6d7c288f18078db796a4ba4d54f8d532a847d3a58eaea1fc428e1bd621550ae165bd5b2a976a1fe21a17b87a14914d6d49b7a25dc690f4c2d65211503dbf794a9c07a09d83b76c7018e07bd802ffe08239d414ea92b2bfc6db0feb9a06a430520b1a9430256850302af54c0b6f453b34d6ec0c57eb7b42dee1ddf34ae6a78f019181e2e5bdd87f4fd50b90fd318b465f73f3af0b3e9b2ac397f85da337ceb54658923ffcdb3d839e6df06ccd28972aed5e140c412481451c870ec33d269d1f13da76c35e82538137103357707ba753b057ff309fa82fd4b27449cc6bba20101fd850e70850f3cd2cfc1658432d2dfee4cda66e4f7b7a25788aac125bcbe40e01607d0781c5b83d0c8466a8ea4483cbc39d17e5215feafde3d1cbe1ef4805b74024289800000000000000010100007f00000028bedc118444cd152863c02963caa3a2df3ae38fb93fb3c7172e40080b222f5267be854ff045a8bab435be335a7b655dd413adefbd21b991a8573577c1b17d2ef682c940edf2cb7f441a0f222505e058ba54e04de3364a40bf471dd36a87ff763490fbfb65cc204e87e98d502ecb54a5b8c232a0c2e0bafa3c7091c573cc7db11cb64e6d66000000"], 0x1140, 0x41}, 0x10000}, {{&(0x7f00000075c0)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x7}}, 0x80, &(0x7f0000008700)=[{&(0x7f0000007640)="71b70dbd638d935a2783578aae7d96111e9f", 0x12}, {&(0x7f0000007680)="485ddeb77398d2ef1d4324f7681fb43db4b0fb05087d452222a80daae89f1c43cb4036e5b06ca06f149177f8d354590eaca441c90ce5b35ea09718ceba58ad67a0f64cacbb3db6c4897fabb47d5ec42f9aad65e28b94b7a263c3ade43b34749b738cce68", 0x64}, {&(0x7f0000007700)="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", 0x1000}], 0x3, &(0x7f0000008740)=[{0xa0, 0x11a, 0x6, "a28c740d9634478bea72f49ab9f71191154f0d0014c2ad149ed64ded87991bd343eea6b01bd49862763a08e4e28be74b43834b54270fa66e3d98d18b4fe72e802160116658f4c159faf8dadf825657241ec0eeb3611c8f25ae79b8992879ec27e1ecc1ff25583ee19210b23c43a1ba9cb273467ddb735dd6b82d1b24266c304a6a6fbe35da6a86bcedc8938b377f"}, {0x50, 0x0, 0x8, "88c0aefc04f1689aefc2708c278e4865474d9796e5ee781332ea4c6467fdd2b86564237dd20667cd86f102c17702e1b9d6dbccda2f529e6e79"}, {0x78, 0x11f, 0x6a, "b1329e6330071057eca569aae4be48fc0b426be0949e1b1df2bcafaf59391d33ed54607cc8001a080472dd7a825ca6364cdc35d27fbe2138634138a530e2d8c4e2945b58faaf509c13cf8e137ab4d4bddf8517a21afc52f85ee7c52ee3f1ab83c2"}], 0x168, 0x20004800}, 0x4}], 0x5, 0x44000) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000900), 0x4) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = gettid() r6 = perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r5, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000780)={0x8, 0x5, 0x8000, 0x5}, 0x10) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000480)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xcc, 0x0, &(0x7f0000000800)=[@release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3, 0x2}, @decrefs, @release={0x40046306, 0x4}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x2, 0x0, 0xda63d17ed4f02d1, 0x0, 0x0, 0x38, 0x18, &(0x7f0000000340)=[@fda={0x66646185, 0x8, 0x1, 0xc}, @fd={0x66642a85, 0x0, r7}], &(0x7f00000003c0)=[0x0, 0x0, 0x58]}, 0xfffffffffffffffe}}, @acquire, @transaction={0x40406300, {0x4, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x10, &(0x7f00000005c0)=[@flat={0x73622a85, 0x10a, r8, 0x2}], &(0x7f0000000600)=[0x30, 0x18]}}, @register_looper, @decrefs={0x40046307, 0x4}], 0xd, 0x0, &(0x7f0000000640)="2994f5df8cfbd4b2c8b54a555f"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:51 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)={0x2}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 19:53:51 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:51 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:51 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', r2}) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000100)={0x100000000, 0x7, 0x100000001, 0x4, 0x800, 0x101}) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d630010429a2da733ae4df72f133fa19852cf74bf19240bcb5f80cfe231138edd000261409a7db8352c1508f00f4f88a9bdf637c57111d76330cbee1d4413dd36e8c5c00581dd6fdd7635722ffe3c09ec2f844ad5aae339c0b39276819fecde4e1345056536c6600cab35d00800000000000000e4047cf22b8bb450cc35af9c24766700000000000000000000000000"], 0x0, 0x0, &(0x7f0000000800)}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000140)=0x4) socket$netlink(0x10, 0x3, 0x4) 19:53:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x121001, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 19:53:51 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xfffffffffffffe5b, 0x0, &(0x7f0000000640)=[@exit_looper], 0xffffffffffffff0b}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000040)=0xe5, 0x4) 19:53:51 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x1bc) 19:53:51 executing program 2: mkdir(&(0x7f0000000080)='./file0//ile0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x78000, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100013, r0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x869, 0x81]) [ 443.202009] binder: 6017:6021 unknown command 536871488 [ 443.215436] binder: 6017:6021 ioctl c0306201 20000440 returned -22 19:53:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000800)}) 19:53:51 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r0, r1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) keyctl$join(0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) getsockname$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000200)=0x6e) 19:53:51 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 443.248560] binder: 6028:6031 unknown command 268460813 [ 443.248570] binder: 6028:6031 ioctl c0306201 20000780 returned -22 19:53:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {{0x1ff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@fda={0x66646185, 0x5, 0x2, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x0, 0x2}], &(0x7f0000000200)=[0x38, 0x38, 0x78, 0x48, 0x28]}, 0x6}}], 0x93, 0x0, &(0x7f0000000540)="2cbf1304449be5ed23db781e9e66a2d7806e0f32766313be751ba32ba10ed7a1670fb70cca22760c07e2143b72517b35f3c197d7f4a3d1339638c339523b741ced4af52b5db5a873893227b5ac17aed486eba353e4b34bb074e520d478ec4c73ebb0bd11887cf7281a7f03ddbf171dd8224e6fa4bea4c4f720250d148efc8eddace24155bc4d0e29f3237a04f105ab48aeefb45c5d907d7bd1ce9b52ca60874d8f431bf58e1a00679c3ec2e8ae7e5ceb694e837e868abbff0300003a620fff5159f580c9b39ca5cdbea3e5f887e2444f00e15de56b08f5e1997e8a3392c632c1"}) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x3ffffffffffff, 0x2, 0x2, 0x4, r1}) [ 443.250178] binder: 6017:6040 ERROR: BC_REGISTER_LOOPER called without request [ 443.253445] binder: 6028:6031 unknown command 268460813 [ 443.253455] binder: 6028:6031 ioctl c0306201 20000780 returned -22 [ 443.306129] binder: 6048:6052 unknown command 0 [ 443.306138] binder: 6048:6052 ioctl c0306201 20000780 returned -22 [ 443.306857] binder: 6017:6051 unknown command 4743953 [ 443.306863] binder: 6017:6051 ioctl c0306201 20000080 returned -22 [ 443.363944] binder: 6061:6064 got reply transaction with no transaction stack [ 443.363954] binder: 6061:6064 transaction failed 29201/-71, size 0-0 line 2921 [ 443.364560] binder: 6061:6064 got reply transaction with no transaction stack [ 443.364568] binder: 6061:6064 transaction failed 29201/-71, size 0-0 line 2921 19:53:51 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r3, 0x4, 0xffffffffffffff9c, 0x0) accept(r0, &(0x7f00000005c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x80) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:51 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1000}, {r0, 0x830a}, {r0, 0x5}, {r0, 0xf200}, {r0, 0x20c}, {r0, 0x100}], 0x6, 0x6) 19:53:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000400)="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", 0x1000, 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/20, 0x14) 19:53:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = dup(r0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="41142444dd9df509320cbe96d0d7a0e3", 0x10) [ 443.978754] binder: BINDER_SET_CONTEXT_MGR already set [ 443.984116] binder: 6017:6051 ioctl 40046207 0 returned -16 [ 443.990347] binder: 6017:6021 unknown command 536871488 [ 443.990473] binder: 6017:6072 ERROR: BC_REGISTER_LOOPER called without request [ 443.996984] binder: 6017:6051 unknown command 4743953 [ 443.996993] binder: 6017:6051 ioctl c0306201 20000080 returned -22 [ 444.017131] binder: 6017:6021 ioctl c0306201 20000440 returned -22 19:53:51 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x3be, 0x4, 0x100, 0x8f}) write$P9_RATTACH(r1, &(0x7f0000000040)={0xfffffffffffffe8e, 0x69, 0x2, {0x0, 0x1, 0x5}}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x8a, 0x0, &(0x7f00000000c0)="0703bf5cfe681d96cadfb953188919fa5396d83cd9d22703cc8cb7b3e6f0eb2cb521c5b6e5b923c71ba4059d5e5b400d1ec2ce63dbfd55003dd8904971a564be087cf67e87866fbf70bc64d3cf78292100000000cbfc300c046743fdc0b2c661e838332e5907ec2a17faa599b60ba61eb989e51dd175558f9ea4eb16626f45c88701201bc4369af835a5"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000180)=0x42df) 19:53:51 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) kexec_load(0x7f, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="0df02314c23ba6a1c30c5d93459bb3b75984620cd70e4bb190a6d7ab998524da09dc9469d3f9c025", 0x28, 0x0, 0x8b}, {&(0x7f0000000400)="9ad8f3251e09f208835c0d5e2cc30018a3d2c09787733b7b23d8c9431f2beb836b8a33abc874686599ceb60b56716627f3c43d7f0dfdcaf0f3ee681dec00aea693aefa5a2bae306c76efda3ef0e1df7c5f24ce96f271723756d0957fc938ccced82443b272887aa5bc54e3d5675d4e3c5d522f8895ce195d466dfc838fcc6e39cc75cf37c7988a28b6150b2dab9c97a2e9b94afbff2e601a413983ba06597d3c1767e7f9fc52371016bf936af970c1954e1c29bacf0157d3f540020a14e36247335228a9adb1831387fd61f29b", 0xcd, 0x9, 0xfffffffffffffff9}], 0x2) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x2, 0x10000) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x101000, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0//ile0\x00', r1, &(0x7f0000000140)='./file0//ile0\x00', 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000040)) 19:53:51 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper]}) 19:53:51 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge_slave_0\x00', 0x600}) 19:53:52 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x200000000000000}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x7, 0x9}, {0x7, 0xe000000}, 0xaa3b, 0x6, 0x58897afd}) [ 444.082862] binder: 6084:6085 unknown command 536871488 [ 444.094363] binder: 6084:6085 ioctl c0306201 20000440 returned -22 19:53:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r2 = memfd_create(&(0x7f0000000100)='/dev/binder#\x00', 0x3) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000140)=""/66) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @free_buffer={0x40086303, r1}], 0x26, 0x0, &(0x7f0000000080)="b297e5eaae533562094d11d87d749fd3b0c4c0c1128edf3ff7a00f6475620531af08d7d4a50e"}) 19:53:52 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x100) 19:53:52 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000001c0)=""/199) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:52 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 444.123790] binder: 6084:6085 ERROR: BC_REGISTER_LOOPER called without request [ 444.161535] binder: 6107:6109 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 444.182639] binder: 6107:6109 BC_FREE_BUFFER u0000000000000000 no match [ 444.188496] binder: 6084:6110 unknown command 4743953 [ 444.188507] binder: 6084:6110 ioctl c0306201 20000080 returned -22 19:53:52 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r4, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) fcntl$setstatus(r0, 0x4, 0x400) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) accept$unix(r0, &(0x7f00000005c0), &(0x7f0000000340)=0x6e) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5710f709, 0x0, 0xfffffffffffffffe}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:52 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:52 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:52 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x8cc0, 0x100) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x7fff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_WIE_ON(r2, 0x700f) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) recvfrom$unix(r3, &(0x7f0000000300)=""/130, 0x82, 0x1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 19:53:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:52 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:52 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xc}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xd8}}, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='ip6_vti0\x00') 19:53:52 executing program 2: mkdir(&(0x7f00000000c0)='./file0//ile0\x00', 0x2) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 444.879525] binder: BINDER_SET_CONTEXT_MGR already set [ 444.884924] binder: 6084:6126 ioctl 40046207 0 returned -16 [ 444.890848] binder: 6084:6126 unknown command 536871488 [ 444.896246] binder: 6084:6126 ioctl c0306201 20000440 returned -22 [ 444.902652] binder: 6084:6110 ERROR: BC_REGISTER_LOOPER called without request [ 444.910406] binder: 6084:6126 unknown command 4743953 [ 444.915694] binder: 6084:6126 ioctl c0306201 20000080 returned -22 19:53:52 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="6f020800"], 0x0, 0x0, &(0x7f0000000800)}) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f00000000c0)=""/172) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00') r2 = getpid() ioprio_set$pid(0x1, r2, 0x0) 19:53:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x58, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4db05f6aa959eae2f3c33c258a23b81b33243ef0dd8d8c157dc1b316fdb89677f849a8f7b9e67505e2bc5d71f3ab6febfacb996438c995717842d730e7bea6bb7cb62095f2af2304dece2fd95d32166c5bbc8d83171409cbb2259122a9869295f05f73c539c141faaeb3dc1300000000e70e23d4633883f5083b7bc73b8ed40ceee68360f744c48f1ee330c5bd0d0fe4706b37a9ccfb05bbcd67fe4e77fe6fe20b30426e02000000fdc55a125bfe1bd98d2719e2f54f05cf"], 0xf0, 0x0, &(0x7f0000000080)="571eacc0b3fdf704e55377567c12295c19fb5d3bc62b488c1b4189ef804c18a96caa4ed0359470d310a821ce490c0000000000000000f1237f000000afa4588cb2cc475b6d3fbbd3c3da787f5d4632473fd9e502009254c2e6173c17dbabbf269b118b7b4f9b6e567c540ba7b854fc1656c57040e4faea9560c523d37a1d21bef1aab9a30b7f79841bf42f7222f6da8d0230fb6e1eac7ea7a2d03ca167f82694d995d9a10f93b04a9f865610235b53eddbf3b5f21ed95d6c82801c14948af0a6fa6e0529fac1003b262810b153c5dc6fac329a2dcb5ef6121943958b1258cf68ba6f11f1000000000000000000000000"}) 19:53:52 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4) 19:53:52 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x2}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:52 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = userfaultfd(0x80000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x81, 0x800, 0x800, 0x1}) 19:53:52 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:52 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000040)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:52 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r2, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:52 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f7379732f6e65742f69707634007673f0832f685f6e85646573745f636f6e6e00", 0x2, 0x0) [ 445.040032] binder: 6153:6161 unknown command 1784655949 [ 445.052971] binder: 6147:6157 unknown command 536871488 [ 445.052980] binder: 6147:6157 ioctl c0306201 20000440 returned -22 19:53:52 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:53 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) r4 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x84) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, r5) bind(r4, &(0x7f00000005c0)=@xdp={0x2c, 0x2, r2, 0x27}, 0x80) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x80, &(0x7f00000000c0)="ec1247c59c4352977dc444e4e950ef31474c243aed1b8c038a2c00d3a95e774ab67db16e935cae33ec4696394062c009842f00de6d97631043710de8811c343d5b62e3e496764d69bae7e57dc072e6a97ad140c793d943aafaffa5da3fe0234baed230217197addee5b3703e348d99") ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000500)=""/157) rmdir(&(0x7f0000000240)='./file0//ile0\x00') accept(r0, &(0x7f0000000300)=@hci, &(0x7f0000000380)=0x80) 19:53:53 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 445.053097] binder: 6147:6157 unknown command 4 [ 445.053105] binder: 6147:6157 ioctl c0306201 20000040 returned -22 [ 445.053210] binder: 6147:6157 unknown command 4743953 [ 445.053218] binder: 6147:6157 ioctl c0306201 20000080 returned -22 [ 445.058811] binder: BINDER_SET_CONTEXT_MGR already set [ 445.058819] binder: 6147:6157 ioctl 40046207 0 returned -16 [ 445.059162] binder: 6147:6157 unknown command 536871488 [ 445.059170] binder: 6147:6157 ioctl c0306201 20000440 returned -22 [ 445.059204] binder: 6147:6169 unknown command 9 [ 445.059212] binder: 6147:6169 ioctl c0306201 20000040 returned -22 [ 445.121237] binder: 6175:6180 unknown command 536871488 [ 445.121246] binder: 6175:6180 ioctl c0306201 20000440 returned -22 [ 445.121360] binder: 6175:6180 unknown command 0 [ 445.121369] binder: 6175:6180 ioctl c0306201 20000040 returned -22 [ 445.121472] binder: 6175:6180 unknown command 4743953 [ 445.121480] binder: 6175:6180 ioctl c0306201 20000080 returned -22 [ 445.137638] binder: BINDER_SET_CONTEXT_MGR already set [ 445.137646] binder: 6175:6183 ioctl 40046207 0 returned -16 [ 445.137942] binder: 6175:6183 unknown command 536871488 [ 445.137950] binder: 6175:6183 ioctl c0306201 20000440 returned -22 [ 445.137983] binder: 6175:6184 unknown command 0 [ 445.137991] binder: 6175:6184 ioctl c0306201 20000040 returned -22 [ 445.143734] binder: 6175:6183 unknown command 4743953 [ 445.143743] binder: 6175:6183 ioctl c0306201 20000080 returned -22 [ 445.228339] binder: 6196:6197 unknown command 524911 [ 445.228348] binder: 6196:6197 ioctl c0306201 20000780 returned -22 [ 445.229198] binder: 6196:6197 unknown command 524911 [ 445.229206] binder: 6196:6197 ioctl c0306201 20000780 returned -22 [ 445.327360] binder: 6153:6161 ioctl c0306201 20000780 returned -22 [ 445.335297] binder: 6153:6161 unknown command 1784655949 [ 445.340872] binder: 6153:6161 ioctl c0306201 20000780 returned -22 19:53:53 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x7, 0x70, 0x7, 0x0, 0x4, 0x513, 0x0, 0x19, 0x80, 0xc, 0xffff, 0x3f, 0x5, 0xb4, 0x1f, 0x5, 0x10000, 0x7, 0x9, 0x80000001, 0x100, 0x9, 0x0, 0x4e5a5d06, 0xdc3, 0x28, 0xe17c, 0x2, 0x49, 0x0, 0xd75, 0x1, 0x3, 0x2, 0x0, 0xfffffffffffffffa, 0x82, 0x10001, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0xb3}, 0xc8, 0x80, 0x6, 0x7, 0xfff, 0x240, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)) r1 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x80) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000340)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @loopback}, &(0x7f0000000200)=0xc) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x4000) 19:53:53 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r2, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:53 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80081, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) 19:53:53 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80800) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'team0\x00', 0x2}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='romfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) 19:53:53 executing program 1: capset(&(0x7f0000000080)={0x19980331}, &(0x7f0000000100)={0x5f, 0x4000000000000, 0xff, 0x0, 0x0, 0xf77}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000180)={0xa, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f000000"], 0x0, 0x0, &(0x7f0000000800)}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000000, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@empty, 0x0}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000100)=r3) [ 445.836783] binder: 6203:6206 unknown command 536871488 [ 445.842842] binder: 6203:6206 ioctl c0306201 20000440 returned -22 [ 445.854644] binder: 6203:6206 ERROR: BC_REGISTER_LOOPER called without request [ 445.869687] binder: 6214:6216 ioctl 4b66 20000180 returned -22 [ 445.884489] binder: 6214:6216 unknown command 15 19:53:53 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = dup2(r0, r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) r4 = getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) getgroups(0x1, &(0x7f0000000540)=[0xffffffffffffffff]) getpid() r8 = gettid() getresuid(&(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)=0x0) fstat(r0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000022c0)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="a7cdc8ac75d37484e23305dac4687b8355077d549f9e97a523b732dc7c4e7360f50ae790f93ac22365835ae12597dcf2aab127b2eb273d27e4062d3159c1f76411ec19180989584c5ee074a11d6854ce216b4c88f6673c13463ea1ddb84970c2cedf9de6c2c7cbaeff6bf9da69bafc528d273a80d8e92c1beb103af74f5c4f", 0x7f}, {&(0x7f0000000100)="599045419478002a03621c1b9450562f269ddc2e5eb626ffd313535425dc31971f0f91b268264e4d8af6e7d78803d4b1a9369b6844a527ee2fdf051dcf3eab42fc7a8bea2d260e7f1fcd451290b38b289f46503441b74214e7c041ebcb2e453c0df32d5d18857d475c09b2e14ff0787e3296b6cf62e6b75c48faf3a575286660819d7cc16f557ed766afa3f4943118a017064ca9235b", 0x96}, {&(0x7f00000001c0)="ea", 0x1}], 0x3, &(0x7f0000000680)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x10}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0xe0, 0x4000}, {&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000600)="c493e5606b74bccfabb43704eb", 0xd}, {&(0x7f00000007c0)="ce64b0d320c9c2892273534f5c1ce79a7f5fd80e78ed5e9c179e2b3512f4b5aadd8e0ef419c09ad99d03542fa3c58270c1dd8634e0260e54350a2fcdeaccbb9de18267d1756640d34eb79d6ff650d3911bf994ac226969237d090773b36867648bc042617392ece3d012e3db37f066e90acbbdd9497354c81473e673a32f137e0a8bbbf5e883ba", 0x87}, {&(0x7f0000000880)="0aaa34e73a53e12084f565df0f3284dea1742b8d6418cd3ce97d7bea382383f9c82b86ea881cf023328df619c721bb0734b84b7ec96ef3ef4dd8a82b8cc489d6be30d9a59cc27144ad99b074bc0f7b38d3ee151841c4e2e71bbb5e28783b349b528ecadaa6a5ca764f2fd9e81aa4e022c8fa12312ccae0e895bafa2274b2b35ead63fda7c6b9d024b526779fcec82e83fcdc0d4caea90fd50037c23b94d96ed70eee87851b8a0f3b23cfa36c19eb9e3cb91fe97ffaf4a80d9e0be5eb0625e167895f54a91b64dbac7335d0f8c3b4cac9358f2672cb017cc8b761d8524a5899", 0xdf}], 0x3, &(0x7f00000009c0), 0x0, 0x20000800}, {&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="a723e2449342dcb9fae48d8e612f4b17f4fe2a150af5d720cdc96214fa058a8d6c3b2ea479ebc28d10bb0127e698acca58c3ba613d49d6d37906ac77560fdb131cb990554e3ddc5af622331fc8e069be57e9b97f3830b8930587a960aed907ad10966ea37dd47582b286256d86f13f3a6ddde1b098353b5a6893b1d33e360eb258bd6537f8f9fe783cf657fb640f5af871f6e1ac8cdb5cbb324873acd50188673dd5718178f5071f0fd9869be08b1f1b8a16c4c75ca4d837fb843b9bbe0e1785f1ce86d33266ce4cf46b08cf80ad39bdd9231d740ea73b", 0xd7}, {&(0x7f0000001b80)="8c07b4664489c076aa2ad4ad5b9f624c16b75d4e75fdc862cf61ded083abce8c6582183b7cb8afdcd34208531892b9212b61b89f178e546dcb12201ebf19ad2498de2f149821a03bdf46d657a1d7f9e8b5f1054a8c3907eba0684bee7f00302cd68bff500e3716de1d22a4320282a22447a84ab7eb6ae0d9c46c984d1153d736f880204c6f18ccdbd9e59a911bbcdb20d9932a91450436ef6fad1758eeef316bdbd864836aaa807ea1718ced718d36ae330701dcdcf1fb4b4325b65ab6aa9f510c22b543e2449a254201893b1b8658c1c8d4e0", 0xd3}, {&(0x7f0000001c80)="d74b87b517b45504162b9c41244d4bbf94b5ba2b19cd3f304333d0da065bd22c50b9cec8477650d8bd103eeccc424b5ba7681ac9e22d5f252e128b67d723bba5de9f0439b09f0b0f89e1334786241af88fea653002f36ba48ca8f8c3dd6587217598488121aa585068544557facec49229224ec7022d40de7b7040a002b56e2ce29c468372b084c8035e86bec581070f8671bcdb7e6b47", 0x97}, {&(0x7f0000001d40)="c1a48a5291c70d63038752ead334080ed962ba84c94612c21103bb0900db29cb4dbbc487e15098870cca05eef090683b89a583ed8e2f1cd371721d1327031a7b00ec6c03bffc2f3503443802aed5c445063c5aaa5d11b7f00eb5dc9873f33711a1c1842beb96aca19c83dec239b9f4ae8bdf6b2882ba7144e7e2f5599489cb86c8b2c1afab3e8bf902939cdcb1037b8aab", 0x91}, {&(0x7f0000001e00)="ad4491e1dea97633003f704e50f90696e83151a654195efc766f09bce1615afe13ad25430c1c7475bb2895132f99bbbae266af391419002af75e9743dc872d345e9b739ea76766ce555310279c5cbf4d277b7cfe5002466b3b10d57cce4efd485469faf7ec584770571f0c232b50743d1c14f704d7e9401eba4feef3e91d2627a28e", 0x82}], 0x6, &(0x7f0000001f40)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x30, 0x800}, {&(0x7f0000001f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002000)="dc27c0f4d6efe699f39b7a7139c2eb11db46916761", 0x15}, {&(0x7f0000002040)="9688371a6923be12da6902a7034ba7d6776c53cd3446132166dc35b15866694ee5a462487b97c9d22274e585470e489941a5785aae797c756979535576cfce", 0x3f}, {&(0x7f0000002080)="95bac8bea834578f0db28278fcf1a38a253216e90b78a40428c92290b139dfce83892083dd2aec9be95af61aeda205294c2b139540795b5f85b18a8f14a22a2fdf7d45fc8f93d18c2a102cab3ecbdae0072e2544efcf451af7378eda77ac61338f31c8c4577530ae45a52ccd37da488c8f73d7", 0x73}], 0x3, &(0x7f0000002280)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x20, 0x4008080}], 0x4, 0x8004) 19:53:53 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x80000) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x1, {0xa0, 0x4, 0x3}}, 0x14) 19:53:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x100) tee(r0, r1, 0x81, 0x9) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000001c0)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x1a, 0x1, "1274c592748f38fc715b93067fc981391998791b2bb5fb11c1313b8522bc20b22c3042a75bb68ed42c8a3c3f81daf791521c37d372eb124d07cea5b217781ce5", "110d717dc9f1bb2fb261f7603cc64b0d87c11ff98ad983e8e8d506275ba98137", [0x4]}) [ 445.903512] binder: 6203:6225 unknown command 4743953 19:53:53 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x151043, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)="2f70726f632f5d79736e65742f697076342f76732f6578706934a95a8072655f6e6f646573744f636f6e6e00", 0x2, 0x0) 19:53:53 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:53 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) r1 = socket$l2tp(0x18, 0x1, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@gettaction={0x98, 0x32, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x7, 0x40000000000000}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffff9}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x4, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x14, 0xf, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xcc32645ff9304ecf, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0467044000000000"], 0x0, 0x0, &(0x7f0000000000)="0787ff9337b70af8b5f6df43"}) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'user.', '/dev/binder#\x00'}, &(0x7f0000000180)='/dev/binder#\x00', 0xd, 0x3) 19:53:53 executing program 2: mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000080)='adfs\x00', 0x82000, &(0x7f00000000c0)="e1b2f585b58a375fd8eeeb0446d2bf8ca5961e489d90c5264f") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 445.903523] binder: 6203:6225 ioctl c0306201 20000080 returned -22 [ 445.953252] binder: 6214:6216 ioctl c0306201 20000780 returned -22 [ 445.969657] binder: 6214:6229 ioctl 4b66 20000180 returned -22 [ 445.979177] binder: 6214:6216 unknown command 15 [ 445.986496] binder: 6214:6216 ioctl c0306201 20000780 returned -22 [ 446.048809] binder: 6248:6255 unknown command 1074030340 [ 446.055121] binder: 6248:6255 ioctl c0306201 20000780 returned -22 [ 446.064481] binder: 6248:6255 unknown command 1074030340 [ 446.070141] binder: 6248:6255 ioctl c0306201 20000780 returned -22 19:53:54 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) ptrace$peekuser(0x3, r3, 0x2) r4 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r4, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000006191653389002faf806fee2fc283ffe664"]], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:54 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x15d4dd0562a247c4, r0}, &(0x7f00000000c0)={0xfffffffffffffffb, 0xff, 0x4, 0x8001, 0x2, 0xff00000000000000}) 19:53:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0dbbc9159fa6c8a8a53e9b22cae50f7951c94f99d3f0b74f5239a5538c03fc6e2187a691b0553de024dc686fbed375a393e44352c575e8f48ce772886385b0162ff1659e235628adfff0e27fff01000000000000fb388acb336a2f804a1016ac7824b29d00000000e180747e2a1b7fae9d432a6586ebb53633d0c0fc1f3b6381862edfa31cb190c6131c0aa37b2368d3e7bea4bca9bd46550fc67c3ca2de8433ae7effdbcbb947c25ea2120d014fd8599b67637804d48023c6b6f8f2e53e195266fd950eae3b8231040057e29e67ccbe5c485c9a03284eca052c14f55d5c5d3d0a91feaa6dde17efdc0dac99248dd9d67800b6aaa2bda62ee69c7191e32c9b8780a7cb14b574083f7c65237db0166e82350ed9d373acc42c51c378fec778edcdf48c5f0919a5ef80ea842edbacb81db88d9fcdab86389f297687c65918433f31d1cd77ff2b02655a34e05afe7767a53ee9c16c95cbd495a5e289a9e22bc0ec4901cd6e010560c5b168d808f452f370b00d39dda0e5fd1202abcdd4cb9ff33b996aa02b8fe13f802c1e7e0e2303653bb085fe862761efa861c6994a4f0330dee3714e4aa4b7d01c1fadf55ca1eefb49aefc3308bc8b0a67dc8582090eb1efd236338841a50c98d61b522fde8535d162baef5758ae41a859e9bdf7be8cb29f9871de66654a13256a060804915d5f76e19c12f0484f126a"], 0x0, 0x0, &(0x7f0000000800)}) futex(&(0x7f0000000140)=0x2, 0x1, 0x2, &(0x7f0000000180), &(0x7f00000001c0), 0x0) 19:53:54 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:54 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000140)="b390f80b9f7a49c13c091f5cb4956ff74fe9d397c339f9418d42e977f3c263feb99e4f8741a5b38a56eddf89aa23c911", 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000080)=""/19, 0x13) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) [ 446.640524] binder: BINDER_SET_CONTEXT_MGR already set [ 446.645859] binder: 6203:6225 ioctl 40046207 0 returned -16 [ 446.652452] binder: 6203:6260 unknown command 536871488 [ 446.657966] binder: 6203:6260 ioctl c0306201 20000440 returned -22 [ 446.664507] binder: 6203:6225 ERROR: BC_REGISTER_LOOPER called without request [ 446.672355] binder: 6203:6260 unknown command 4743953 [ 446.677575] binder: 6203:6260 ioctl c0306201 20000080 returned -22 19:53:54 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) 19:53:54 executing program 2: mkdir(&(0x7f0000000040)='./file0//ile0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0//ile0\x00', 0x4) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0xc000, 0x0) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x2, {0x2}}, 0x18) [ 446.704566] binder: 6263:6267 unknown command 365542157 [ 446.716109] binder: 6263:6267 ioctl c0306201 20000780 returned -22 19:53:54 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:54 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x0, 0x1, 0x0, 0x1}}, 0x2e) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000000c0)) 19:53:54 executing program 2: clock_getres(0x7, &(0x7f0000000000)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d02a59b4b5b13a26fe1010941f8b1aff55e034a30656ec17d5b78d17b31d700f98c04a266102e244e53f7b63ffbd9d664aa4a654"], 0x0, 0x0, &(0x7f0000000800)}) 19:53:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) pwrite64(r0, &(0x7f0000000000)="3681359084c9b300e4b781145179b7130beb5e016b1c1345b927c1c0ef0be22d76945993f8c103ae279ef54b7de16287fa7b77f00e817f5e0f55572c917ba07774a5dc00fb55e0b6f8352106de5e0214dec44f8279deefcde886a5387d59f79bc36f1170a6fa323d0e4f5bfa7e7c99c3cf39b8c890259d563537", 0x7a, 0x23) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) [ 446.753572] binder: 6263:6267 unknown command 365542157 [ 446.760088] binder: 6263:6267 ioctl c0306201 20000780 returned -22 [ 446.777038] binder: 6279:6282 unknown command 536871872 [ 446.777047] binder: 6279:6282 ioctl c0306201 20000440 returned -22 [ 446.777180] binder: 6279:6282 ERROR: BC_REGISTER_LOOPER called without request 19:53:54 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:54 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2\x00', 0x50, &(0x7f0000000400)="7bbf30ff94a7b9e5e15a356fccfacc990f07f6cd88a10345a95fb224cec9fe13c5b6117832deba79bafcae8cb9f6de69a435dc07e7382afc0bbdaa9a556e54643c2148761085e64ee6bba81e320e901c3247a5266f525594564da7c970f20e40ded2329dd8c71ac305b576a0981c8ce5535755d76c4d499fa5db8ddd142cee8c7661cea7ab367929b1ac0d5e8922fac7450a5175fe4a9684149ab1a1ccdc6d357c79f8e16a5246b47c1bd4abfec387f8a7360fb7e026d98c348e6cf1a17dcca615976713d30e854284a4df3bb9eb3a5f466bacd8fd0f30bb3707175e6edc979f26cb6e1379ffeef4c9b7a0209f9c4e46fee53bb8f29cd4157471b04b1d1afa50b41bddea96825c0dc918f8a2ab575d99f24697562d1e937aa3a09fa79f2f86ceadfc38ac2f3d4d6fa1977f9a2a1f14f900fda780b08af6d42982b886efd628b754c0f8c21e376a89d818de53f93f37a455082857a548bebaa4911d87ab4d7e838659ea9c142d04d5627fdf092fddb2270bc95baac1b44157fa22ee8c5fb1fd3fdad90ce00fcb26388baa22609da0d185aabefe5f6cd1850679dd2372f365253abb5b0d298900759314506024c55e0e3428d3fd8bfea2e71d623fcb3d62299f0f592b862147d93254d6f6cb7611fd3262160de751e66bd2be3bc531212531dffdc244254a278451d56fc25e053ef886ba68382841c4f49e039348fc345451202d62d782e6f41c1ca06d50e621aae129069326ae9b871b192c6a01c0bef50ae2aa8b4d51d13d642dae3c40cd7c7ddfd683dda96b8597cd4e5bbee01c16ce992b46d96bf70ad6915be02fa2de4ea1fded5b35191c9acc81376e18d59797aa360fb3638607bdfe5e2da015da01e98278e78d8a7c26733d1873ae3515a3aed22ef077de1d428e897b2dfb53a9aea8823d1aa275b6e0f31839c831f6364477cff2040da6f3340fe4531f6cc221fc56808381578160827c7bde95cbe0bc1ad116d49eed065b71d6531966ecd3d9df645aee0ff266af02f36f9178d83063d3dfa2ff8aa8c3e4b492875f95836b4924bb441ff9250713ba2395be09656f20632be2ab2e0234611a93930aa91b1f67f4faf8db49c864728e630dcea9512fda42889f77883f9efb3982aa0c5d9dd0493d7aaa306a281637264fe16d2065b6539f3c59147efd4e4cbde58585c217125f01bbb21ddf2a2b1423e9a6aba6cf51e0edfc699c4da2761304b21d298e0187107842ee07cf01f9fbdd35dc91d9d141b482a1190947948ac32855b08a871446b4afcecee627f175859ef218804f577e0c2f9e7fabf46e636d79ff2b82c2a149d5893db706965a15cf4ad957a30ec4fedfa9a8a4ff0707b06cfd97aa7fb3f74ac0c549aec9fcaab66205328b9470610ec2653e15582ee9cb738f11bf95ca038252c3718074853566c24421630d660e608fbb17216959b480143c43240a511db6d0452889f0df56d631ec18367a280c5aeaa5572497eaa3f3ea93d63c40228047fa515486d1d99e4c854c20ed7ccb9963026b62ab892d2c6d3b824dd4324290271458dd34e0cfe736778d81d9248955600e93550cd34b4101adfb1706c34b1420380297de92a3e0c924af8bcd3655f90247cf6e4dd0b15b4e4bcd1a9a094015120e310080f08c243df648bf23fee646f562ca7e67f92d015d6d8f748473607ff95c5bd09b6d062a887f07458063f1db77e06c3374c6b9fae11d8d49388544239e00c92b208b8d9283d7df3baf1d2ee80dee6f98779f41dac8f8f08eadb990c40abd6ae77c30fba3a0ac67a84b87c6c039c6c9926385812c289bd12975827a28305de53c9ba2c1da150391b822b9d632dad1a15cfd28dde6b1470840329c67fbe5394e0046338a5052f6de0268b41852e31bd9f353107a9d830117d48082ff36e287beaf81a5ae343f285e170bdd97b2b08a403b8962e30349500a218c833fa8bd54098b30559bafb38f1008e6b0147aef63c0a10f66d141db02a659982bd4264340c2799eb7f9c792749bae87bb6ef669b14a8b14ffeddb70fadbce45e616f8a5f71d7d9b462358168156351f2b43b25fe758c46de90f7c3e8d31256f0f6478ecef235a3a44c7b3f5be5369db115685d820a1e23467201755ac2d90c53732749dbcbc3d7f9f90b65f66eb090ffd110ed1395cea93719f5e1019ab922a0e290f95c3038099fae097fb737428cd83477808d9058a3ba2a97247139a3b37d5b021f39f1a4f25f9d29449b77a93d4a2fd76bd4b786459741c55c4e2089d9732b89aa4a78d5a67d845e15fc8227be1e79160c59e9fdf19db5a2f497c6b83225dfb4e82f6b3c92b68b8b9353669409cb48f999362ab2d231af98e9a47664c4809305c7540b74673e8051dc7282394d563c53729afa36d03cbe3670215c26fe0c94b950bc28f7f6be4e72352fd7cb5f2ce3c7707394d2a50e788240611995df96b3f63ea617f365710c9d9a0ee18ff5bc40867c0bb5d702bec9f15fec3d8ed721c2768940a2022d3c18c5e0d9d6c518fab7e28d6683b2337aca0ee23efda6f7d6f7c0a6b2c0af757999c27dd185f2cf61be9a0f002f7784652f4c1b588bdadad11a7e579d1042615c8342d49264e4a5966bebe10623892ef66d39b8d3a46274c656708332833f5945417bd012b8a53255df2f1606e3af0dfe9046e7c31f198fe5b0fc1beabda3b81dab66f32da348e3cf990d51f2352b1f2094f6a013d769bdc03af74d3e263f261ad6b4b857849ce01615c14784f330a56ed85891edffca417d59aa8bee75f2512b100238f612dce4d787cfc204bfd18e14ee730745c1f08383176f9cc11c47d80ec963cb4171a7f0d0de62ec6ab028e9d2852a5dc4747b02a2feb4ca78235fc2724b3328a997160a9e012911adf953522c19cfd58e96cb137a6a42320f4e5d66a5b04b66f7a24fa9ac022dcf2c4f177e16715dbb40f3dce3b5a94d58f135c32bc0d05ea7f08f199be04977f061bb4398d36e089da77b614818cda5b7bcca0b732801d3301784355255d7338429012c66633b327d7adbeb5614e6d88b564efd3eabf8100e2f059be1b45d4189ac33516dd2b4dfd82cd166c63ed1a84753a7378aac59e98227cd04b3eda796dc04b46bc667d022f2d8d15e100b9fb01bb05a99be39ccee551415add8ba8365f465ec678006de149a0fbe44f2b49c6fef2d31529819a081d66dd9dbbbcc8cb095c783ee898797a30831b6463883e6a5b6e7df17677a3461acdffdc1d14f06714fb4af038c70b8bb6474c095129f4761e54aa5e011a0ae5effad59f5e7f731dac5d6d1e36bdf3800bc808d81d65da240d3d71fb4888aa40b6c9cd0e999344c25490ed84881e5b2304ad58f564b5e66d2c8a273e87fb1994ee2746c845bfffb5b1c4b6f0d863d26e4122dce8c0c5a268de644c88695f025b913f36d9b4d14bee5e8bacdd3625df803689a09d07d0c32b4ee99fe94bde12599723d1176fd222ab2be6adcd62df7e602bd269a31db0a5e3ad95f340db107d3b045bb8e13b3ff3ab5c6ff5f68885e80b4a1643da59399b6af40b21994853b6dc1424d4892048bc1fe62245840733d1050a5adc7879be6c3c9eebbf6aa09504c500a9cde965c4e452e2aaa2884863fc2c65f9caa3f3f3ae9826fb5a6f02e9c82f1b17741b56caa6f0966a51c24050023a594c1aded890f56ce9bd21ea9f23542f3522e287e62b4b09ebb840009970da501cfd107e39c97e9069d6c5e9acadd28eae9d1eb89e45c877870b1f5d60489816edd793f7ffeb6423d5a5aa8d5b336889ddbb47d68281e87e5aa356c469d074de10a07d05150e65207d72e8df99442bc9003e7b395c0c674231699ed97781be9c330edae599fcad7e26f88765ffe2fcb261a316bec97a23dd253da7baa70ec4a512b2196d4389ac7c60c15fc9e14806e9ed3b7002f69e0eb305b840377774a0b45fe13a41ed0d6340942096bd2fccd16927862a28b65438d9fdea327bd01e9834f28dbfaeea1ec0e50ee7543e6ce532e27ea754a82e9c290ede84c2d2706fca12cf16fbc447a090a4e36a7f7b44da591fa136e9d59aa05bffc861fc0a83189e85b25086450f2495a77869aab7773cb7f41e1bda2e922930938bb4c6fdb1b73988d5fba770e293bbe6cb316a21776b2d8711c277f2777308108042c4e04b4eb37351e593653c5da6f5bccc9e9e4d13102ba7deaf169859d0bab16bf670fdf5682f775834dfee427993cc59a726d49115acc47ad71fa598b15e42dce95fc8d2503dd43e8bd7846be2024272c51119aa6a55e5498ccd3e8e770b070d9e95efc0c83d728dd978d2b9c95c9da4a18c168acd37d830f9aa140fb98f2742eef89dad2cfc3c912a47d85c37e56ef02b0d8c4e599d8fab6efaeddeca1c5504ddddc455f07df8c281ade1c9061d19001e0b26274cde37a49f1c0d03bf77c729ee87ae15e064797eaf629307ddfaeb87cb9c9f88dd9e2f7f3aeb09f37678521bf2f31a74691ceee8bfcd2141c1568ee524c9e77ae7549f4a16fe3a888451501df4ab7279a687d32ba04f826ddff2cda22d64049f7ee996346c7991886791aefdcc370f28642d29b85ce8df17ea3a907754a21dd08316cd9611d324b6ba019fecb6086f6ca802845771d60b09bb8704ec694493315c2ef91c150e586cea3da598372ee28e887af5624ea1dca4aef57defed37d91a8ac97beec636843afcfbc63b7e190dd5260146b21692a7c18ddf87afa7eddb9a5f8e9f5350f3c2fb3a5d2316aad21c50f36b4fa819b1839a5a2addb4cdbf25cb3fddb868c5774cf07d0bd55a379580c6dbacc072e58c2a714454985de71d547f7f08eba4a665b7cbe0dae41e039bba38bcd02bee2e250ac9d9845fa65a5ed84d56e8c44290ee694a4fa0db51b89539b28cb66a9b0e5d9ecb2d68bcd0983886cb9947bdbc003bf0de6da853c9acb17da22530391d797c9e262fdffa59b44474c61d824903e6ef120faa75ef5775065a575859117407f367e09d86330a0e2e739df3bac5fc4ae94a14193ccac9cdb59347a5ad138d81516cfe62a60a44378442f3b92f58a478e7fbad5e60607360eb2d41490122b0cdb579fecec9546e6252aa2281ea7b1dd2bb2a5920cfbc700e70c02cd834cd2b2ad45fa5fd7ccfe827c47d87a6d9b4dc765740fba562387b49bc7fee08b26b92e09830164d1ab077e64d204efeb3ddb91dfa9be3006c97865684cb817bbb9915ec7ec1efb04ecb102c8fea13d54b7c9ae81b03d4e52e883d831eb4c8ca4fab45f072b8706869a0f95ddebc8691c35a0ab81b605d43f491aa57474d662f12c66c1f9442cdd858301f654c395a4054b074088270149f81fbec4ccfb8dde30b6a08d00830d366395b14215d8041abf7a32772417ceb32eea327b680a81924c7e6654bcc562906e7def82dd15411303be1800712dad39010a4d77b46aca620e3e8b58d58ffe6e7efd7b5167ebbb15817983383f26c33ff6eb50b77d1be52250642edf4ddc4e6e025bb26b5a2a11c5bd150e239834149e3a3150617095305029b3b037e52fceef1225225b323d60ab784a032c865d32c1213562e90f422464f4466f34bc4bc29c3871b3e73321e2b0f1b0fe909ae7afb4cd36576e248e0dd7f25f4954c6cb65effc3e256fda8eaf3a683b770bd3d62357c3ec4d78fdda5983351354097e28da5b2db5278c8abc6cc6f1ab76dd2d75f22a8bd7733bb1f84f52b6c42de99134c4999ff28554b251d0fc6a84efbf63a538074418b13a95b0f0cf81693b184110da953eebe3c603c4c4161e284e7a13babc3d25ab18baaaa7379426a58") mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001400)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f0000000200)=0xe8) getgroups(0x4, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee00]) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000140)='fuseblk\x00', 0x30c138e68a35d351, &(0x7f0000001500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xe47}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}]}}) rmdir(&(0x7f0000000240)='./file0//ile0\x00') ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000002c0)=""/59) 19:53:54 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) read(0xffffffffffffffff, &(0x7f0000000180)=""/11, 0x3a2) epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x0, 0x1) connect(r1, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0x2, 0x300) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000f4, 0x0) fcntl$setflags(r1, 0x2, 0x1000000000001) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9, 0x7}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 446.835608] binder: 6295:6297 ioctl 400454ce ffffffff returned -22 [ 446.836465] binder: 6279:6296 unknown command 4743953 [ 446.836475] binder: 6279:6296 ioctl c0306201 20000080 returned -22 [ 446.898412] binder: 6312:6313 unknown command -1269224752 [ 446.898430] binder: 6312:6313 ioctl c0306201 20000780 returned -22 [ 446.900592] binder: 6312:6313 unknown command -1269224752 [ 446.900600] binder: 6312:6313 ioctl c0306201 20000780 returned -22 [ 447.000136] binder: 6295:6324 ioctl 400454ce ffffffff returned -22 19:53:55 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f00000003c0)=0xc) sched_getparam(r1, &(0x7f0000000480)) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r4, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) 19:53:55 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2e3) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:55 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) accept$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @loopback}, &(0x7f00000005c0)=0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast1, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000600)=0x216) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) setresuid(r6, r5, r4) 19:53:55 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180)={0x7d3}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) pipe2(&(0x7f0000000040), 0x84000) 19:53:55 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:55 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:55 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000080)=""/237, 0xed) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 447.558438] binder: BINDER_SET_CONTEXT_MGR already set [ 447.563899] binder: 6279:6296 ioctl 40046207 0 returned -16 [ 447.570349] binder: 6279:6328 unknown command 536871872 [ 447.570353] binder: 6279:6329 ERROR: BC_REGISTER_LOOPER called without request [ 447.583954] binder: 6279:6328 ioctl c0306201 20000440 returned -22 19:53:55 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2) linkat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x1000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="04000000000000000100000001000000010000000300000005000000000000000010000000000000ff0f000000000000ff03000000000000000000000000000000000000000000000e2300000000000000000000000000000000008000000000030000000000000051ad0000000000000000000000000000000000000000000004080000000000000000000000000000ffffff7f000000001f0000000000000003000000000000000000000000000000000000000000000004000000000000000000000000000000faffffffffffffff870a0000000000000800000000000000000000000000000000000000000000000021000000000000000000000000000005000000000000000800000000000000030000000000000000000000000000000000003be500000000040000000000000000000000000000"]) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x274aebca4f63ef53, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000"], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="06000000af2238474dcde54e154c412da41f196af62ffd68b0be48bba4"], 0x0, 0x0, &(0x7f0000000800)}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000180)={0x7, 0x4b, 0x1}, 0x7) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000003c0)) 19:53:55 executing program 1: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x8) write$P9_RXATTRWALK(r1, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0xffff}, 0xf) ioctl$TIOCNOTTY(r1, 0x5422) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x101000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0xef, @remote, 0x4e21, 0x1, 'lblcr\x00', 0x8, 0xad0, 0x6c}, 0x2c) capset(&(0x7f0000000040)={0x399f1336, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffffffffffe}) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000200)={0x6, 0x3, 0x1}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d630100"], 0x0, 0x0, &(0x7f0000000800)}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x2, 0xffffffffffffff12}) 19:53:55 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000100)={{r0, r1/1000+10000}, {r2, r3/1000+10000}}) open$dir(&(0x7f0000000000)='./file0//ile0\x00', 0x10001, 0x61) [ 447.659973] binder: 6351:6352 unknown command 536871488 [ 447.666861] binder: 6351:6352 ioctl c0306201 20000440 returned -22 [ 447.681474] binder: 6351:6352 ERROR: BC_REGISTER_LOOPER called without request [ 447.684298] binder: 6354:6358 got reply transaction with no transaction stack [ 447.684307] binder: 6354:6358 transaction failed 29201/-71, size 0-0 line 2921 [ 447.698948] binder: 6362:6363 unknown command 90893 19:53:55 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\rE\x00\x00'], 0x0, 0x0, &(0x7f0000000800)}) tee(r0, r0, 0x8, 0x6) 19:53:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000000180)}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x5, 0x100000001, 0xffffffff7fffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'bond0\x00', {0x2, 0x4e24, @remote}}) fsetxattr(r1, &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='security:ppp0\x00', 0xe, 0x3) [ 447.698957] binder: 6362:6363 ioctl c0306201 20000780 returned -22 [ 447.699529] binder: 6362:6363 unknown command 90893 [ 447.699536] binder: 6362:6363 ioctl c0306201 20000780 returned -22 [ 447.715376] binder: 6354:6358 got reply transaction with no transaction stack [ 447.715385] binder: 6354:6358 transaction failed 29201/-71, size 0-0 line 2921 [ 447.715955] binder: undelivered TRANSACTION_ERROR: 29201 [ 447.715989] binder: undelivered TRANSACTION_ERROR: 29201 [ 447.765658] binder: 6351:6370 unknown command 4743953 [ 447.772861] binder: 6351:6370 ioctl c0306201 20000080 returned -22 [ 447.780199] binder: 6368:6372 ioctl 40305828 200000c0 returned -22 [ 447.780900] binder: 6368:6372 ioctl 40305828 200000c0 returned -22 [ 447.822733] binder: 6383:6384 unknown command 17677 [ 447.827927] binder: 6383:6384 ioctl c0306201 20000780 returned -22 [ 447.835298] binder: 6383:6384 unknown command 17677 [ 447.840942] binder: 6383:6384 ioctl c0306201 20000780 returned -22 19:53:56 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x2d3, &(0x7f00000007c0)=0x8) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x3, 0x8, 0x0, 0x0, 0x8, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x1, 0xa7c9, 0x401, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_bp={&(0x7f00000006c0), 0x3}, 0x8000, 0x0, 0x0, 0x0, 0x289c, 0xf98a}, r2, 0x4, 0xffffffffffffff9c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001480), 0x8, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)}) 19:53:56 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x800) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x0) r3 = dup(r1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000100)="6778ad9df3fcb7e5a77462") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x30, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1, 0x4}, @free_buffer={0x40086303, r2}, @decrefs={0x40046307, 0x3}, @dead_binder_done={0x40086310, 0x2}], 0x62, 0x0, &(0x7f0000000040)="9b9f17496bcc9a868d618884031da765b6da7256b488b651f11085d6ed027b17eed35b1d681330d69f4eedc7bd5a6c08699126ef5a15f64b6720247e52dbb61dfc19076f295a7769ccbfb4bce7e5dc828819dea705f6cf11067c7888dbcb5dd9fa88"}) 19:53:56 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000100)={0x5, 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @local}, {0x306, @local}, 0x4e, {0x2, 0x4e23, @loopback}, 'ip6gre0\x00'}) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="997e3587352597835da55d107bd4dc2e80b5e95ad36968e41688b2af3fe936f0a4ff679acb2232070d73d87bf1ec783620ceaf99b9903149f47e091da9fcce64b26185f974caeb0416bdb98037079743246ad1bd08daf4d23b6c8b96d909d8786bfe5a478176c51af19e192488bef5b881236080"], 0x0, 0x0, &(0x7f0000000800)}) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x7, 0x5) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000140)={0xcd, 0x0, 'client0\x00', 0x6, "1deb8c9045fe7aa0", "1ffeb6be2c9a5b4d60c8e3cbd13652735538f2b8443b01c5a5b6932d6763a59d", 0x3, 0x5129}) 19:53:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:56 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x2}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x400080, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000140)={0x20, 0x0, 0x3, {0x0, 0x4}}, 0x20) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x80) 19:53:56 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0//ile0\x00', 0x2) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 448.465777] binder: BINDER_SET_CONTEXT_MGR already set [ 448.471196] binder: 6351:6370 ioctl 40046207 0 returned -16 [ 448.479288] binder: 6351:6389 unknown command 536871488 [ 448.479298] binder: 6351:6389 ioctl c0306201 20000440 returned -22 [ 448.479331] binder: 6351:6390 ERROR: BC_REGISTER_LOOPER called without request [ 448.547894] binder: 6403:6404 unknown command -2026537319 [ 448.565650] binder: 6405:6408 unknown command 536871488 [ 448.565659] binder: 6405:6408 ioctl c0306201 20000440 returned -22 [ 448.565736] binder: 6405:6408 ERROR: BC_REGISTER_LOOPER called without request [ 448.572680] binder: 6393:6409 ioctl 4b41 20000100 returned -22 19:53:56 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:56 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000640)={'trans=unix,', {[{@access_uid={'access', 0x3d, r2}}, {@nodevmap='nodevmap'}, {@access_uid={'access', 0x3d, r3}}, {@msize={'msize', 0x3d, 0x7fffffff}}]}}) userfaultfd(0x80000) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000280)={0x3f, 0x6, 0x81, 0x1, 0x9}) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000100)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) mount$9p_virtio(&(0x7f00000002c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8000, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616832226c6f6f73552c63613d6c6f6f73652c00000041765f0f967e000ebbcd4e05000000000000000000a50c4e6fee83ed861cf70500000000000000ffd64ce00ae6dc7ce55a36f29e43e76bd8e9890a0a5d530ffc49c5c3913a458e65fb84c4ba063ad2cd2a242afb05cca1687f4f0914601d1caea5f2302bb09e136223b57c37a05fe9fec18bc21f91def82c4b49c796e60e57b78b148861c9c38758c0f125fd1bfb89d21cf9794e6c6e73728babec35"]) ioctl$KDSETLED(r0, 0x4b32, 0x84) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)) 19:53:56 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20200, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0/../file0\x00', 0x3) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:56 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 448.572746] binder: 6393:6409 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 448.572756] binder: 6393:6409 BC_FREE_BUFFER u0000000000000000 no match [ 448.572765] binder: 6393:6409 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 448.572772] binder: 6393:6409 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 448.625392] binder: 6405:6415 unknown command 0 [ 448.625404] binder: 6405:6415 ioctl c0306201 20000080 returned -22 19:53:56 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x840, 0x4) flistxattr(r0, &(0x7f0000000080), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:56 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x9, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="8a408d3cab73b85615735cfe02b4a6adcc514fbac8b1bf80bdffb1361b8e22d3978d65d222f2377fbde97b597f135ef24fe9874e774644ddfedc1a66c3a75b469f48f67ae8b1045717f65c89152d88d5db1bc03c5e98f23951668f12e4d6e9b0eca383b27e363d5298b1fae8f5597839555ef4956a16e2aa7cd0e428faaeeccac696fd15f30693b82d5a8a212cf15d61c24a7b12960b95217adb06b140933635365bd9311f10d278752ab653d7b403c3db46e29399248f68f22a56e70f6eca94c3ba49ab979e5f1610ef4d2af3b699bb6b91236674fedaf18a04f13a53778d4dc8cdaa9d84db07eb0b1e182c9d1deddf52a0022986d6ecb56d", 0xf9, 0x1}, {&(0x7f0000000280)="c41e05df9d27c34435a3345e2e968870ace3f8f29a27aeff8f9508517faaf13d81f6b5981a282783f32640a2a12403dbad2d949b9b2d62a622f9bd43caab15c66fd3b5099328abb42c1e617d10cd4560dd82b6ed26464ae9b3cd35d355090d5737083a122019a5d2b0a2a5de082ea1632410bc29", 0x74, 0xffffffff}], 0x80020, &(0x7f0000000480)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@data_ordered='data=ordered'}, {@prjquota='prjquota'}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@norecovery='norecovery'}, {@commit={'commit', 0x3d, 0x6}}]}) [ 448.657334] binder: 6403:6404 ioctl c0306201 20000780 returned -22 19:53:56 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x40000000000000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) 19:53:56 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x38) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f00000000c0)=""/141, &(0x7f00000001c0)=0x8d) [ 448.698082] binder: 6403:6404 unknown command -2026537319 [ 448.707251] binder: 6403:6404 ioctl c0306201 20000780 returned -22 [ 449.331227] binder: 6393:6449 ioctl 4b41 20000100 returned -22 [ 449.337466] binder: 6393:6396 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 449.344257] binder: 6393:6396 BC_FREE_BUFFER u0000000000000000 no match [ 449.351032] binder: 6393:6396 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 449.358559] binder: 6393:6396 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 449.369784] binder: BINDER_SET_CONTEXT_MGR already set [ 449.375558] binder: 6405:6415 ioctl 40046207 0 returned -16 19:53:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, r1, 0x2}, @register_looper, @transaction_sg={0x40486311, {{0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=[0x20, 0x0, 0x68]}, 0x3}}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@flat={0x0, 0xb, r1, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000180), 0x0, 0x0, 0x18}], &(0x7f0000000200)=[0x38, 0x20]}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)=[0x30, 0x68, 0x68, 0x0, 0x28, 0x60, 0x48]}, 0x2}}, @register_looper], 0xfffffffffffffee4, 0x0, &(0x7f0000000040)="caba8982e441f466722d955c34fff14822da49b36f0f92ecc620ad2f82b178b89d0f856417761914bf4b8db010e53cbb0823c242b90e5f2434cd5c34b02806f5f2e910b6724d4c35f3f5345d8596df70caa7cc1517bbc347f324ceb6dc2ac94d2bccd66e9eea6e2807251edbac57b1849b375348"}) 19:53:57 executing program 1: capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000040)=0x54) acct(&(0x7f0000000000)='./file0\x00') write$selinux_create(r0, &(0x7f0000000240)=@objname={'system_u:object_r:audit_spool_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x2, 0x20, './file0\x00'}, 0x57) umount2(&(0x7f0000000100)='./file0\x00', 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x5, 0xbdb1, 0x39c, {}, 0x80000001, 0x5}) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000000c0)=0xf8, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 19:53:57 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='eth1user-ppp1]selinux\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2000020, &(0x7f00000000c0)={'trans=xen,'}) r0 = memfd_create(&(0x7f0000000100)='\x00', 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={r1, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x16}}, 0xc) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x5) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x0) r3 = dup(r1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000100)="6778ad9df3fcb7e5a77462") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x30, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1, 0x4}, @free_buffer={0x40086303, r2}, @decrefs={0x40046307, 0x3}, @dead_binder_done={0x40086310, 0x2}], 0x62, 0x0, &(0x7f0000000040)="9b9f17496bcc9a868d618884031da765b6da7256b488b651f11085d6ed027b17eed35b1d681330d69f4eedc7bd5a6c08699126ef5a15f64b6720247e52dbb61dfc19076f295a7769ccbfb4bce7e5dc828819dea705f6cf11067c7888dbcb5dd9fa88"}) 19:53:57 executing program 5: accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000180)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x10406, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0xfff, 0x5}, 'port1\x00', 0x0, 0x2, 0x4, 0x1000, 0x8053, 0x7f, 0x5, 0x0, 0x2, 0x7}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xfffffffffffffded, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:57 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x1, 0x7, 0x1, 0x100000001}, 0x6, 0x6e, 'id1\x00', 'timer0\x00', 0x0, 0x2, 0x7a, 0x400, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) quotactl(0x70, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)="1cad77c41096fe680fe2ed509023510ca0c1d0ac40b97cd1b52f145551920ffb82d4bb980d79b8ef75410527449b6feeb3c3730113f06cd9ecae7c796866c0394f1a47939a963f8f67e065c6928345e2e129a8f05ca4ce9146") [ 449.381431] binder: 6405:6451 ERROR: BC_REGISTER_LOOPER called without request [ 449.412096] cgroup: remount is not allowed 19:53:57 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x143000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x2, {{0xa, 0x4e20, 0x80, @local, 0x7}}}, 0x88) 19:53:57 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x5, 0x0, 0x80}, 0x401, 0x7fff}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:57 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:57 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 449.451774] cgroup: remount is not allowed 19:53:57 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000), 0x10e, 0x0, &(0x7f0000000800)}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000040)) 19:53:57 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) socket$nl_generic(0x10, 0x3, 0x10) 19:53:57 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='bfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 449.538457] binder: 6466:6469 ioctl 4b41 20000100 returned -22 [ 449.548978] binder: 6486:6489 unknown command 0 [ 449.556469] binder: 6466:6469 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 449.556527] binder: 6466:6469 BC_FREE_BUFFER u0000000000000000 no match [ 449.556569] binder: 6466:6469 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 449.556608] binder: 6466:6469 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 449.598161] binder: 6486:6489 ioctl c0306201 20000780 returned -22 [ 449.623429] binder: 6486:6499 unknown command 1986356271 [ 449.628966] binder: 6486:6499 ioctl c0306201 20000780 returned -22 19:53:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000000c0)='./file0//ile0\x00', 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x3}, 0x8) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='./file0//ile0\x00', &(0x7f0000000300)='cgroup2\x00', 0xfffffffffffffffc, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:58 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) arch_prctl(0x1001, &(0x7f0000000080)="2867702420991271bb9e574f152e7f88c3a1bbdf512e2e4490bf076c711caded1552c7bf923df5c5ea89d3e14f53ea50d374a05c6d9a55d967559aedb9ffd8d85de6025a8ed709cf9346cf328a6de99daa109c80e1701eba7bd05dabf697ce4913673a0693b59b91015daea1235c3d3aeedb02c7cb685f8d87d6a98fd195051792ac415fe0445f7aea6469f5041b54f83a60f1c7c53da11d03969d737ad027d55a47e8e51aad726bea97575d204dc4ac68c89843ad1f8df0d8522ba71dbd5c1fd36409a85c5f61fb59f850b0259ede7c77ec1bca173529bdc2c349") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:58 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x3, 0x6, 0x1}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:58 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/160) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x0) r3 = dup(r1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000100)="6778ad9df3fcb7e5a77462") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x30, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1, 0x4}, @free_buffer={0x40086303, r2}, @decrefs={0x40046307, 0x3}, @dead_binder_done={0x40086310, 0x2}], 0x62, 0x0, &(0x7f0000000040)="9b9f17496bcc9a868d618884031da765b6da7256b488b651f11085d6ed027b17eed35b1d681330d69f4eedc7bd5a6c08699126ef5a15f64b6720247e52dbb61dfc19076f295a7769ccbfb4bce7e5dc828819dea705f6cf11067c7888dbcb5dd9fa88"}) 19:53:58 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0//ile0\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:58 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd(r0, &(0x7f0000000100)={0x5}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x5) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@dev, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) 19:53:58 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:58 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) write$tun(r0, &(0x7f0000000000)={@val, @val={0x3, 0x4, 0xd1, 0x8828, 0x8, 0x1}, @x25={0x0, 0x7, 0xff, "c5c8914a377a0f4a00354e242a8ab09c16ea71ebbada71d08c43030dc002eed914d999da144920f450aebe081e9e053aa69e0aaa7d3c8e9f8389b87f84118e7d145233aec2b24d3c26a71484ea0dbeaf4b8f064ed09d4140e3ee86900e78aa3e37a0ee3fd30e82d00cc3258572cb54b02ac64a29e23e6f03aa8cc940babf806c83e9110c894554a03e1276432b9895941e8e1b9ffccbe5965526e9864eaed8c532e339c456485cd05d8bafda14a7c5b6c2a80e979c7aaf50716a7acb6a55f72b74a7bc42eee28072a814b069e8248c8681921abaf7138d3d47761a193bf586ea87c9805e309df389"}}, 0xf9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) pause() read(r0, &(0x7f0000000100)=""/126, 0x7e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:58 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) rt_sigtimedwait(&(0x7f0000000080)={0x9}, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:58 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) finit_module(r0, &(0x7f00000000c0)='/dev/rtc#\x00', 0x3) 19:53:58 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = dup3(r0, r0, 0x80000) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x3, 0xfc6}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xbc) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19:53:58 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='coda\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:58 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="8d9eca82a74c99dd5c28074bc4f352d3b1ea0e62992a655e50b9138adf1e37974f6d9805414a1a557de22c0a3f7bbbd4") openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x70000, 0x0) [ 450.383707] binder: 6519:6532 ioctl 4b41 20000100 returned -22 [ 450.392886] binder: 6519:6532 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 450.407114] binder: 6519:6532 BC_FREE_BUFFER u0000000000000000 no match [ 450.421930] binder: 6519:6532 DecRefs 0 refcount change on invalid ref 3 ret -22 19:53:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0xfffffffffffffd5d}) 19:53:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x24000000000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @loopback}, 0x200, 0x4, 0x4, 0x1, 0xd4, &(0x7f00000000c0)='ip6gre0\x00', 0x7, 0xff, 0x80000000}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) get_thread_area(&(0x7f00000001c0)={0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, 0x80000000, 0x6, 0xffffffff, 0x8, 0x8001}) modify_ldt$write(0x1, &(0x7f0000000200)={0x800, 0x1000, 0xcd0565ad9b175ab7, 0x10000, 0x80000001, 0x3f, 0x80000001, 0x101, 0x0, 0x1f}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syncfs(r1) 19:53:58 executing program 2: mkdir(&(0x7f0000000200)='./file0//ile0\x00', 0x2) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000100)=""/143) mkdir(&(0x7f00000001c0)='./file0\x00', 0x4000000000000) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x8, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:58 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180)={0x0, 0x4002000000, 0x9}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 450.430023] binder: 6519:6532 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 450.433881] binder: 6545:6552 ioctl 5411 20000000 returned -22 [ 450.434732] binder: 6545:6557 ioctl 5411 20000000 returned -22 19:53:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:53:58 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:58 executing program 1: mount$9p_xen(&(0x7f0000000040)='posix_acl_access-\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000, &(0x7f0000000240)={'trans=xen,', {[{@access_client='access=client'}, {@fscache='fscache'}, {@posixacl='posixacl'}]}}) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f0000000100)=0x80) dup2(r0, r1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:59 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x41d6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000800)}) 19:53:59 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x400, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) renameat2(r0, &(0x7f0000000040)='./file0/file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1) rmdir(&(0x7f0000000180)='./file0\x00') rmdir(&(0x7f0000000100)='./file0\x00') ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) 19:53:59 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x3) fstat(0xffffffffffffffff, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:59 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:59 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x4040) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x0, 0x19}) 19:53:59 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x82080, 0x0) accept(r0, &(0x7f0000000040)=@nl=@unspec, &(0x7f00000000c0)=0x80) 19:53:59 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) mq_unlink(&(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d630000ab52f703f103827dfeebd54fc4d15100000000000000b82d71d715ac457f51f3fbd480e6e341410b338a74e5dc240b2a75c13aa8e2b7bc2dc3f394078cfa81b728d8e75ad59a24fa62ecf5f5977d393ccc6b639f0d6978b9cdbafba071d09ea5f6b64c43ce8afb317e71c84c3a02521aee283c441182a247d420f84b26a883c3fd4844cc9fb0aeaddfa9aa16e415953e0d3983a66ec03115063fb2819cac3c87e445b4f76dafe3ce"], 0x0, 0x0, &(0x7f0000000800)}) [ 451.238039] binder: 6592:6597 unknown command -1351615731 [ 451.245311] binder: 6592:6597 ioctl c0306201 20000780 returned -22 19:53:59 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0//ile0\x00') 19:53:59 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8c0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000001c0)=""/255) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x102013, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) 19:53:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x2000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x488080, 0xc0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0x800000000000002, 0x4000000000000003, 0x98a4}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d630000febd976dd30968e5a91ba7651a0f33d991efa8866f8430f20d87356c0a991677d6743c81d2a791038abd7ca56c30ca968793c627d5cfa1c9c558fb32da52b873e2c45ed29524e5866cb10019015ca31c50881fcb5c9649cab69f262a592069d592ea4a7036e834d37bf0899355c537c4bf8532d6024a6d52afda86fdebc7540f6636fcd0ccbfdc05a9f7e505f0331ce0859cde1e18811dc0231e0441ed2b57591def89d1c4b4fbf41ad728278d3b19d08068e7b25cc225d98441921dab35b06bf02b3b4900c67be2"], 0x0, 0x0, &(0x7f0000000800)}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000280)={0xa0, {0x2, 0x4e21}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @loopback}, 0x12, 0x200, 0x4, 0x7fffffff, 0x6, &(0x7f0000000240)='team_slave_0\x00', 0x290, 0x5, 0x1f}) unlinkat(r2, &(0x7f00000000c0)='./file0\x00', 0x200) [ 451.311510] binder: 6592:6597 unknown command -1351615731 [ 451.323072] binder: 6592:6597 ioctl c0306201 20000780 returned -22 19:53:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000031c0)=0x14) connect(r0, &(0x7f0000003200)=@can={0x1d, r1}, 0x80) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x14) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000001c0)=""/86) 19:53:59 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:59 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) 19:53:59 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') socketpair(0x3, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_create(r0, &(0x7f0000000040)=@access={'system_u:object_r:src_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x1}, 0x55) 19:53:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:53:59 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getattr(r0, &(0x7f0000000100), 0x30, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) 19:53:59 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:53:59 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 19:53:59 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xd506}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:53:59 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x5, 0x400400000003f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff0000/0xd000)=nil, 0xd000}, &(0x7f0000000040)=0x10) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') timer_create(0x7, &(0x7f0000000100)={0x0, 0xd, 0x0, @thr={&(0x7f0000000080)="53b22f189be5ade3ed43ddf032f274b3997ee9930ccc8b4054ff7bb13b0ca2ec25a5876eedff5dee3d9babe1864a6b308ddeb2efa17895fb0b3d4aa878ef3f9aadff55bdc37c326f2b54d9222e9ee44016", &(0x7f0000000400)="b70facb25b4d2f1d82850e47896151f3c1f11fa76aabfc54f7ad00a829f1185faf5dea27e233d8a4855de291e4c26a774c1784dff797128dccbc5f9270585d46bffec64cd25dc22fa18ff92099b66b24b04373f9f1272e596ee7a1fac950f86c5e1f3ac8ad413ef2fd3206382843e9b9131b4fb01ef0cc26783a6eeb7cb0ec6924017c304589466397c48704e0f477d22fe7ac32ec09bb34be26ca3f46ed7df6b936ed66771fd537c264feeb04cebfec7fc056d38a3c325429c1995eac6daad834ba30d4a86d6b154065c70af0c2de42ee1e485a05f19c962e1f20eac593be420e780e"}}, &(0x7f0000000140)=0x0) r2 = timerfd_create(0x1, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000000500)) acct(&(0x7f0000000280)='./file0//ile0\x00') timer_settime(r1, 0x1, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000200)) 19:53:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000f"], 0x0, 0x0, &(0x7f0000000800)}) 19:53:59 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getrusage(0xfffffffffffffffc, &(0x7f0000000100)) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}, 0x0) 19:54:00 executing program 1: capset(&(0x7f00000000c0)={0x399f1336}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:54:00 executing program 1: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/relabel\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4081, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:54:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xff08, 0x0, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000140)}) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000100)={@empty, r2}, 0x14) [ 452.180013] binder: 6668:6671 unknown command 251658249 [ 452.187138] binder: 6668:6671 ioctl c0306201 20000780 returned -22 [ 452.198095] binder: 6668:6679 unknown command 251658249 [ 452.206023] binder: 6668:6679 ioctl c0306201 20000780 returned -22 [ 452.237954] binder: 6689:6690 unknown command 0 [ 452.242837] binder: 6689:6690 ioctl c0306201 20000780 returned -22 [ 452.251273] binder: 6689:6691 unknown command 0 [ 452.256745] binder: 6689:6691 ioctl c0306201 20000780 returned -22 19:54:00 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:00 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:00 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:00 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = accept4$unix(0xffffffffffffff9c, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x1ef24c455f19810b) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1000408404, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x3fffe, 0x0) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000340)='./file1\x00', 0xf4b8, 0x2, &(0x7f0000000580)=[{&(0x7f0000000480)="df8e43281c102bf375055516100a4a028fa749e59b6b0fbd834a9f5165a1f2b4e37aef44d8d2aee90a2ddbf9b0cbd597fb42e68cab0a72eb94491c3f61ff1958242795836cdcce0f32213aff0d411c3163435a", 0x53, 0xb309}, {&(0x7f0000000500)="82624005d04b4318e4635dbf7f73e58db60f970db45214abb9bf8b333cdecd70f61189610d78730636db1e515044e611cda91fe06df7ab6f55454a7bfffd0ebfe3f85a203e855e499a3c9b30c541db02b97eea5f6a27addbab0a24e0b48627ef9375a6b6dc51e71f0f4a", 0x6a, 0x8}], 0x2000, &(0x7f00000005c0)={[{@norock='norock'}, {@nocompress='nocompress'}, {@hide='hide'}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@dmode={'dmode', 0x3d, 0x80000001}}]}) renameat(r1, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000280)='./file0//ile0\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x41c1, 0x3ff, 0x1c, 0x8, 0x1}) accept4(r1, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x800) 19:54:00 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) pipe(&(0x7f0000000080)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:54:00 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffec0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)="496a4a1730cbcba3834180dd030409b7a10a4e71a2bbf82be58142123c8999f58cfbf1d858dde0a2ac1b15f2d2e73262513b30c3c84feee1846b1e83410bbdce12c7349594f90d7a8d3b4c4edc17a9ba035aa56c2d240d26e567c5d6ee41e0d9874f2766e427e9e2f5827eed7ce737d61a4195f90345a595647501cb97bdc5f62c48dd8b422ff330f148d48b2dac5b69ac9b56d3ffda"}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x501200, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000180)=0xfffffffffffffffe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) 19:54:00 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00800000e354de109fc1b1eca57701f7e4ffea88b01416022b2b6a2ac71aa1752bf45b6503a3afb543d6de028310535901601fbe208efb22f480001d5f9dbd276c15fbe7d08c65eab3b9d03174c9cdfe87e9dc1ab5d5c181efc7100ad934837a80ee4451c4bda920672993c5b4835eb9edd7219a"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:00 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x8, 0x5, 0x81, 'queue0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x101) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:54:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer={0x40086303, r1}, @decrefs={0x40046307, 0x4}, @exit_looper], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:00 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000001c0)={0xe, 0x0, 0x2, 0x401, 0x1000, "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"}, 0x100c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 452.988511] binder: 6712:6713 unknown command 32768 [ 452.995307] binder: 6712:6713 ioctl c0306201 20000780 returned -22 19:54:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xfffffffffffffde0, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x4}) 19:54:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mount(&(0x7f0000000340)='./file0//ile0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='nfs4\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:00 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4340, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0xffffffffffffffff}}, 0x18) [ 453.048398] binder: 6725:6727 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 453.062094] binder: 6725:6727 Acquire 1 refcount change on invalid ref 3 ret -22 [ 453.071741] binder: 6725:6727 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 453.080285] binder: 6725:6727 BC_FREE_BUFFER u0000000000000000 no match 19:54:00 executing program 1: capset(&(0x7f0000000080)={0x200000019980330}, &(0x7f0000000180)={0x3, 0x0, 0x8000000000000}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc) [ 453.101610] binder: 6725:6727 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 453.123641] binder: 6725:6736 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 453.132757] binder: 6725:6736 Acquire 1 refcount change on invalid ref 3 ret -22 [ 453.140444] binder: 6725:6736 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 453.148334] binder: 6725:6736 BC_FREE_BUFFER u0000000000000000 no match [ 453.155120] binder: 6725:6736 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 453.169432] binder: 6743:6751 ioctl 40305828 20000000 returned -22 [ 453.179190] binder: 6743:6753 ioctl 40305828 20000000 returned -22 19:54:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer={0x40086303, r1}, @decrefs={0x40046307, 0x4}, @exit_looper], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:01 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 453.711075] binder: 6757:6758 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 453.718013] binder: 6757:6758 Acquire 1 refcount change on invalid ref 3 ret -22 [ 453.725669] binder: 6757:6758 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 453.733509] binder: 6757:6758 BC_FREE_BUFFER u0000000000000000 no match [ 453.743119] binder: 6757:6758 DecRefs 0 refcount change on invalid ref 4 ret -22 19:54:01 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:01 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x478, 0x278, 0x0, 0x278, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000100), {[{{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xc0, 0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @loopback, 0x8, 0xffffffff}}}, {{@arp={@rand_addr=0x7, @loopback, 0x0, 0xffffffff, @mac, {[0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x5, 0x10001, 0x3b, 0x9, 0x80, 0x0, 'ip6_vti0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) r4 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x5, 0x400080) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x3c, 0xd, 0x9, 0x8, 0xa, 0x7, 0x6, 0xfa}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="39b62b9c048d755bcf3aad039a353d6c5c281304c4899a523c98a1708d69e622cd81a2c9dabacbfd42a55fa33bc2e28a4e526a84cb56eaf1bdb000027a6fa388204a69c8af32961b7dfa08372b0552ded700a2cb1ce77dec52b955ff9d2a01eae6f0260cb7df7e62a1da647a5030e23e2662e206c62a20810abd1327f5bd56b240fa046a063f7e5f1a6dc6ca50ef55df339fe53392090db96f4f42330f32be3da690d578280c1578e66afe02e60c9fa0617803d8abe22041af6574d0a45c8bd9a138f19496170001000052c5640520efb080b8c0d756105fa50b3beaf9114325f92757cf011f611b35fee00000000000000000000000000000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:01 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x30043, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0//ile0\x00'}, 0x6e) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000004c0)=0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400, 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000740)=[{&(0x7f0000000640)="db1da561bb0d6e4726af2f886d74f79367c73eaaa6033f90bd74cc4128cadd6542472b5d434c383e7a021ff191d225de7df60fec335d910e4986ca32358719146f82184437cad76a09430c339adf7ba931c5a2c14b0a1fe5f0443cb812bc9f70647518ed9b5d83a76cc55c52911eec7ad12881dfc6f3414dfe14cbf1f831a30d4fa8f0e8792b0e70a3f4313dc737fd80d6b621b49c0a3dfc9d9530bccc1995475574bc58bc11c12a5374a28d79b00be9137fa0429833fd00682a6a1d15a0f4dad1e34bed7f766ff7c409713911b69621555ae33a9c5e79ad647c27551bb411bba1206dcd", 0xe4, 0x100000000}], 0x4000, &(0x7f0000000500)=ANY=[]) 19:54:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) getpeername(r1, &(0x7f0000000040)=@ipx, &(0x7f00000000c0)=0x80) 19:54:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer={0x40086303, r1}, @decrefs={0x40046307, 0x4}, @exit_looper], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:01 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer={0x40086303, r1}, @decrefs={0x40046307, 0x4}, @exit_looper], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:01 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 453.856033] FAT-fs (loop2): bogus number of reserved sectors [ 453.865033] binder: 6763:6769 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 19:54:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000040)={0x29, 0x6, 0x0, {0x0, 0x2}}, 0x29) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) fsetxattr(r1, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='*\x00', 0x2, 0x3) [ 453.865047] binder: 6763:6769 Acquire 1 refcount change on invalid ref 3 ret -22 [ 453.865056] binder: 6763:6769 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 453.865066] binder: 6763:6769 BC_FREE_BUFFER u0000000000000000 no match [ 453.865078] binder: 6763:6769 DecRefs 0 refcount change on invalid ref 4 ret -22 19:54:01 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:54:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer={0x40086303, r1}, @decrefs={0x40046307, 0x4}, @exit_looper], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x400100008) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d630000d23a03777adc45277f289ebd5661802e030ed11b9c082b644b161ab2324d207310623c17bda0d6442d20fe9f324f575ca76ee1e015edb62813d54aae3ab50b83c939507a0d1a62168340aef3fb5fadb10aa7bf3fd46758a5d8d1cc4a7c64576d9ca2cab54c91c38b7b1f8e18f8114ce6ad327204143a193917865527e9613c6d0aadfbb47486a873f1186b70978769c91e81548614fcdd0464fc3a5dcffd43c30930bb5f9ab2abf66b4543e6626a6d1eaf28a4ba3ce182b5e3c3b4fad498929bb3534e286192da381757e4afd067faa600623f"], 0x0, 0x0, &(0x7f0000000800)}) [ 453.932956] binder: 6780:6784 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 453.932967] binder: 6780:6784 Acquire 1 refcount change on invalid ref 3 ret -22 [ 453.932975] binder: 6780:6784 BC_DEAD_BINDER_DONE 0000000000000001 not found 19:54:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer, @decrefs={0x40046307, 0x4}, @exit_looper], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:01 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 453.932985] binder: 6780:6784 BC_FREE_BUFFER u0000000000000000 no match [ 453.932996] binder: 6780:6784 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 454.003849] binder: 6789:6794 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 454.003860] binder: 6789:6794 Acquire 1 refcount change on invalid ref 3 ret -22 [ 454.003868] binder: 6789:6794 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 454.003878] binder: 6789:6794 BC_FREE_BUFFER u0000000000000000 no match [ 454.003889] binder: 6789:6794 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 454.050433] binder: 6797:6799 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 454.050445] binder: 6797:6799 Acquire 1 refcount change on invalid ref 3 ret -22 [ 454.050453] binder: 6797:6799 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 454.050463] binder: 6797:6799 BC_FREE_BUFFER u0000000000000000 no match [ 454.050475] binder: 6797:6799 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 454.087128] binder: 6803:6804 unknown command -1674856903 [ 454.087137] binder: 6803:6804 ioctl c0306201 20000780 returned -22 [ 454.088547] binder: 6803:6804 unknown command -1674856903 [ 454.088556] binder: 6803:6804 ioctl c0306201 20000780 returned -22 [ 454.146767] FAT-fs (loop2): Can't find a valid FAT filesystem [ 454.198415] FAT-fs (loop2): bogus number of reserved sectors [ 454.204498] FAT-fs (loop2): Can't find a valid FAT filesystem 19:54:02 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:02 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) 19:54:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e22, 0x3f, @loopback, 0x17}, {0xa, 0x4e23, 0x40, @local, 0x772}, 0x1, [0x2d4a, 0x1, 0x3, 0x3, 0x1, 0xfffffffffffffffc, 0x104c7ac3, 0x5]}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:02 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer, @decrefs={0x40046307, 0x4}, @exit_looper], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000800)}) 19:54:02 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') 19:54:02 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:02 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:02 executing program 4: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer, @decrefs={0x40046307, 0x4}, @exit_looper], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:02 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) renameat2(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 19:54:02 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x38, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer, @decrefs={0x40046307, 0x4}], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="15afa4da58878c5fb86544c47e7c829184963e42fee0d63d3169179d797d3c89004928d24c3baa3aaee883c53e8c47e9d6fb0700174e8fd005dd0392439d5dad022598dcef8fb58306cd52ac97"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:02 executing program 1: setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}, @free_buffer], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:02 executing program 1: setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) [ 454.786595] binder: 6841:6842 unknown command -626741483 [ 454.792725] binder: 6839:6843 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 454.792737] binder: 6839:6843 Acquire 1 refcount change on invalid ref 3 ret -22 [ 454.792745] binder: 6839:6843 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 454.792756] binder: 6839:6843 BC_FREE_BUFFER u0000000000000000 no match [ 454.792766] binder: 6839:6843 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 454.824014] binder: 6849:6851 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 454.824025] binder: 6849:6851 Acquire 1 refcount change on invalid ref 3 ret -22 [ 454.824033] binder: 6849:6851 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 454.824043] binder: 6849:6851 BC_FREE_BUFFER u0000000000000000 no match [ 454.902581] binder: 6841:6842 ioctl c0306201 20000780 returned -22 19:54:03 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:03 executing program 1: setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:03 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0//ile0\x00', 0x19) r0 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='cgroup2\x00', 0x0) rmdir(&(0x7f0000000180)='./file0\x00') r1 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="b12900", 0xffffffffffffffff) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000340)) keyctl$link(0x8, r0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_open_dev$rtc(&(0x7f0000000400)='/dev/rtc#\x00', 0x4, 0x0) socketpair(0x1f, 0x80004, 0x826, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) 19:54:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x59, 0x0, &(0x7f00000000c0)="e22fcaebcd08bf1b52be3d8f79c8a55eb18ec12e5362b71b87f0825251b4000056a664b841b284d0e1c7c7e9e10f0aed7f5ded55340607bf6c7da8ced467d25047811c48ffdf027d18828f4a0c3ec6da8507afff11e5ef851c"}) 19:54:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d630000b2d29fdfb5c9e8a928006b57e0cbba348bade1de5555eff03a8e0e53b659e8d3648e75be1bc5a189d9bdff799adf238ed457d801a4c76b5e8942937eb28878cf4468881cd0559375494c59cb207906088e1a82b17e88e2e00177bf30"], 0x0, 0x0, &(0x7f0000000800)}) [ 455.398156] binder: 6861:6863 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 455.411712] binder: 6861:6863 Acquire 1 refcount change on invalid ref 3 ret -22 [ 455.426833] binder: 6861:6863 BC_DEAD_BINDER_DONE 0000000000000001 not found 19:54:03 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:03 executing program 1: capset(&(0x7f0000000040), &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:03 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9) 19:54:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = gettid() getpriority(0x2, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:03 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x402000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'dummy0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000640), 0x252, 0x0, &(0x7f0000000800)}) 19:54:03 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x1, 0x3, 'client0\x00', 0x4, "af7c4eef2c9a57ac", "a7f7cf49a10dc3fefdf705578d2d20d9b51cd1355877b59db5b6a93522b489f2", 0xfffffffffffffffd, 0x25d0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:03 executing program 1: capset(&(0x7f0000000040), &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:03 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') inotify_add_watch(r0, &(0x7f0000000040)='./file0/file0\x00', 0x2) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 455.595187] binder: 6889:6894 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 455.602995] binder: 6889:6894 Acquire 1 refcount change on invalid ref 3 ret -22 [ 455.616621] binder: 6889:6894 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 455.637497] binder: 6899:6903 ioctl c0bc5351 20000000 returned -22 [ 455.669485] binder: 6899:6909 ioctl c0bc5351 20000000 returned -22 [ 455.679711] binder: 6905:6911 unknown command 0 [ 455.686654] binder: 6905:6911 ioctl c0306201 20000040 returned -22 [ 455.694357] binder: 6905:6913 unknown command 0 [ 455.701631] binder: 6905:6913 ioctl c0306201 20000040 returned -22 19:54:04 executing program 1: capset(&(0x7f0000000040), &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done={0x40086310, 0x1}], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:04 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:04 executing program 5: socketpair(0x5, 0x7, 0xfffffffffffeffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040)=0xf71, 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0xffffffffffffbffe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper]}) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/160, &(0x7f0000000140)=0xa0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x0) 19:54:04 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000800)}) r1 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)="3992180a3bd6107494920b6b350d4a919f84a00f968197d9aa68fca72fceb615b4a89413dec86f6d359171fe803631ced50a17ec0746967f1dba15145276eaaf0187b2405c4c29f815b3cb2da8bc3669f23b85967d770d8c7e33dff0e6604e71fe1133a79268dae07dd4f16451f03c5dff3f0388156ad229833ad5c3375f44ce163ffb5129a2bc08d88eaed95d987263bc06a292c11d393c4e17b289e18757cb9f8614475e197ab2c563a9ca4183667e5e0861a787f37389b198bc6fea18f8bf8f7172", 0xc3, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0x8, 0x9, r2) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r3}) [ 456.245049] binder: 6918:6920 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 456.259040] binder: 6918:6920 Acquire 1 refcount change on invalid ref 3 ret -22 [ 456.269508] binder: 6918:6920 BC_DEAD_BINDER_DONE 0000000000000001 not found 19:54:04 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:04 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') clock_getres(0x4, &(0x7f0000000000)) 19:54:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x29051, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000a90f8762b817c6a59970ea6c8209a9deda28b3a3cd5f2988e96346339eea4b7fa217326c5f27927c486f2c8f5bc18bdd925017db9939fef33b6464d81c2075cf9b31430b3c3dbe81e66717b04de6d4498819857d24c96e7de09ad41f2650232829ae1ad162bdaa7f002a61e7b6774ad15933640ea8e1d350911d2af66de5bc40aa4df21883a22f5052fd409a6b0e0db20246739289d3e7e22e755a967733edc269a8b70a09de6899adc43a0706c17505d468031caebf4c06b156fef8c7ada81075a9c1b51783b7d67e7f45b5e2000000000000000000000000"], 0x0, 0x0, &(0x7f0000000800)}) fremovexattr(r0, &(0x7f0000000100)=@random={'btrfs.', '\x00'}) 19:54:04 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0x0, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @free_buffer], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)='/dev/binder#\x00', 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2328b1f0dc0000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:04 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:04 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) prlimit64(r1, 0x6, &(0x7f0000000040)={0x5}, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000000c0), 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="f5ff0001"], 0x0, 0x0, &(0x7f0000000800)}) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000140), 0x10) 19:54:04 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0x0, &(0x7f0000000080)={0x0, 0x100000001}) [ 456.452902] binder: 6944:6946 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 456.457734] binder: 6940:6949 unknown command 0 [ 456.457743] binder: 6940:6949 ioctl c0306201 20000780 returned -22 [ 456.458233] binder: 6940:6950 unknown command 0 [ 456.458243] binder: 6940:6950 ioctl c0306201 20000780 returned -22 [ 456.485883] binder: 6944:6946 Acquire 1 refcount change on invalid ref 3 ret -22 19:54:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0x100000001, 0x3}, 'port1\x00', 0x0, 0x41004, 0x5, 0x5, 0x3, 0x1000, 0x4, 0x0, 0x1757bf376f8e5871, 0x100000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:04 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0x0, &(0x7f0000000080)={0x0, 0x100000001}) [ 456.498521] binder: 6952:6953 unknown command 16842741 [ 456.498530] binder: 6952:6953 ioctl c0306201 20000780 returned -22 [ 456.505380] binder: BINDER_SET_CONTEXT_MGR already set 19:54:04 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0//ile0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:04 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)) [ 456.505389] binder: 6952:6953 ioctl 40046207 0 returned -16 [ 456.505508] binder: 6952:6956 unknown command 16842741 [ 456.505516] binder: 6952:6956 ioctl c0306201 20000780 returned -22 [ 456.547525] binder: 6964:6968 ioctl 40a85321 20000000 returned -22 [ 456.548028] binder: 6964:6970 ioctl 40a85321 20000000 returned -22 [ 456.595675] binder: 6954:6974 unknown command -1322769651 [ 456.595684] binder: 6954:6974 ioctl c0306201 20000780 returned -22 [ 456.596271] binder: 6954:6974 unknown command -1322769651 [ 456.596279] binder: 6954:6974 ioctl c0306201 20000780 returned -22 [ 456.631982] binder: 6944:6946 BC_FREE_BUFFER u0000000000000000 no match 19:54:04 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:04 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:05 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:05 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)) 19:54:05 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') rmdir(&(0x7f0000000000)='./file0//ile0\x00') 19:54:05 executing program 0: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) acct(&(0x7f0000000080)='./file0\x00') 19:54:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @acquire={0x40046305, 0x3}, @free_buffer], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, 0x0, 0x5}, 0xa) 19:54:05 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:05 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)) 19:54:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) write$P9_RGETLOCK(r1, &(0x7f0000000080)={0x2c, 0x37, 0x1, {0x0, 0x0, 0x2, r2, 0xe, 'bdev@keyring]\''}}, 0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x4080, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000001c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 19:54:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @free_buffer], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d6300001fbdebd0f4cf25c34fff6a5793e1db83db77a1559ea795b0b32b6f806dd5c08f0b8206883ed81319ed54c0f1af61d49c9b17ca2633108e2ae4d06051634d986107f8249ce510b7e7407b1ee928bc7ad4c0c6a1c30fce4ac4d4ba1f6d29864c94fabc4fe8f0e91c41c10b1a6c947b4aebde3d4379a8e82f9d3dbfea079fc0f37dbd6f858ce81fe4e4086f52e1bc"], 0x0, 0x0, &(0x7f0000000800)}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) 19:54:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10800, 0x2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440000000000563044003000000630c4001000000010000000000000066759e391f3bc4871c762afbf3839e3ea6d6f8c9ad0904f8d061b380810fa619aa1b63ae17df53211b1c3592414f91720bd19f7d9389462aec8edb09a4c728da83968662ddcceafecb6e03996940a314e333bcdaae4fc4650cbac2ba75a6f1c29d92131ccf5e8596f71e0a7783bd08d295e4a1ac2a0145537d14806b"], 0x46, 0x0, &(0x7f00000000c0)="906c2833dc3a99714516c1992c070d917c175201d8837c62125116f6d50bb575f3373300641632032679979f7f2f37999af59af57dc7cc3074422055db4a6b9426750a23c40a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) [ 457.349983] binder: 6999:7001 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 457.359503] binder: 6999:7001 Acquire 1 refcount change on invalid ref 3 ret -22 [ 457.371952] binder: 6999:7001 BC_FREE_BUFFER u0000000000000000 no match [ 457.419323] binder: 7026:7033 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 457.421494] binder: 7031:7034 Acquire 1 refcount change on invalid ref 0 ret -22 [ 457.421500] binder: 7031:7034 Acquire 1 refcount change on invalid ref 3 ret -22 [ 457.421503] binder: 7031:7034 unknown command 20974691 [ 457.421510] binder: 7031:7034 ioctl c0306201 20000140 returned -22 [ 457.421941] binder: 7031:7034 Acquire 1 refcount change on invalid ref 0 ret -22 [ 457.421946] binder: 7031:7034 Acquire 1 refcount change on invalid ref 3 ret -22 [ 457.421949] binder: 7031:7034 unknown command 20974691 [ 457.421954] binder: 7031:7034 ioctl c0306201 20000140 returned -22 [ 457.480139] binder: 7026:7033 BC_FREE_BUFFER u0000000000000000 no match 19:54:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f00000002c0)=[{0x7, 0xf9d, 0x0, 0xffffffffffffffcc}]}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x23d) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) tee(r0, r0, 0x1, 0x1) [ 457.952463] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 457.959427] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 457.966546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 457.973470] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 457.979696] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 457.988254] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 457.995595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.003018] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 458.010259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.017658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 458.024336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 458.031656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.039119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 19:54:05 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x200000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:05 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x7fff, 0x4) 19:54:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @free_buffer], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:05 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:06 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000"], 0x74, 0x0, &(0x7f0000000000)="fa529eaa0dea75c87311bf578a2badc983773c5480df30a9a998c518a85a93b0afffc75293dd7b8e1a42f27b2faaebefea7bd7832c7e8463ad4402be40a556551e2d7c673676f4532b148c9e4ee45f93095b09fae47a216763603eb681687d959a0a2d7ab02d2641974f176df2aa270a48d0c822"}) 19:54:06 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x44) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:06 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e10000e3"], 0x0, 0x0, &(0x7f0000000800)}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) alarm(0x7fffffff) 19:54:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}, @free_buffer], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000800)}) [ 458.223596] binder: 7052:7053 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 458.230500] binder: 7052:7053 BC_FREE_BUFFER u0000000000000000 no match [ 458.263492] binder: 7065:7067 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 19:54:06 executing program 2: mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x44) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000080)='./file0//ile0\x00', &(0x7f00000000c0)='romfs\x00', 0x800000, &(0x7f0000000100)="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") rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f00000002c0)=[{0x7, 0xf9d, 0x0, 0xffffffffffffffcc}]}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x23d) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) tee(r0, r0, 0x1, 0x1) 19:54:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0xb4, 0x0, &(0x7f0000000040)="67a50635575505a102366ab2e7a4becd967a1992dff216a461871c4a7d71c63aa31eb12c72368ed69e0e93245a0f177342c8ef17cef45ee21667435ce86bd8c72a19709531e06f0c2575cb4b1781c494f297f9845dcc1dec79fc9186841ef74c2ae1c0a2c8119ee868ff8bc89eb509eefc1e6b356ee6603f50cf781869743b0c4f9f98729810785cfce018c8a71ac294971fa39048fd36e4810608d94c1f78c3ec92fac1e6bd8cb8c6d71cb2f076551af0b74cb1"}) 19:54:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) [ 458.270610] binder: 7062:7064 unknown command -486539039 [ 458.276969] binder: 7062:7064 ioctl c0306201 20000780 returned -22 [ 458.277136] binder: 7065:7067 BC_FREE_BUFFER u0000000000000000 no match [ 458.301441] binder: 7076:7078 BC_FREE_BUFFER u0000000000000000 no match [ 458.312841] binder: 7062:7064 unknown command -486539039 [ 458.318789] binder: 7062:7064 ioctl c0306201 20000780 returned -22 [ 458.346554] binder: 7085:7087 BC_FREE_BUFFER u0000000000000000 no match [ 458.348757] binder: 7089:7093 unknown command 0 [ 458.348762] binder: 7089:7093 ioctl c0306201 20000780 returned -22 [ 458.348970] binder: 7089:7093 unknown command 0 [ 458.348975] binder: 7089:7093 ioctl c0306201 20000780 returned -22 [ 458.357115] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 458.360064] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 458.367723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 458.370798] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 458.373864] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 458.374048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.374205] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 458.374326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.374442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.374556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 458.374836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.374979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 19:54:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0xc002, 0x5) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2e4001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x10000, 0xe55}, 'port0\x00', 0x80, 0x8, 0x1, 0x9e6, 0x1000, 0x4, 0x5, 0x0, 0x6, 0x80000001}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100)) 19:54:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f00000002c0)=[{0x7, 0xf9d, 0x0, 0xffffffffffffffcc}]}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x23d) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) tee(r0, r0, 0x1, 0x1) 19:54:06 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) ioctl$TIOCNXCL(r3, 0x540d) bind$packet(r2, &(0x7f0000000180)={0x11, 0x1f, r4, 0x1, 0x7fffffff}, 0x14) ioctl$TIOCNXCL(r3, 0x540d) 19:54:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:06 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:06 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 19:54:06 executing program 5: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000100)={@local, @multicast2}, &(0x7f0000000180)=0x8) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08631040", @ANYRES64=r2, @ANYBLOB="000500ed91bd6900"], 0x26, 0x0, &(0x7f0000000080)="12bee71c1a686ff6da4121ad064c4b320a4e2d7c366e2364b616a1d7aae9eeb8dff37e6be1f2"}) 19:54:06 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:06 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth0\x00', 0x3}) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2f6f8fb0f0028df231dfe20000000000"], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x414000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x1) 19:54:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f00000002c0)=[{0x7, 0xf9d, 0x0, 0xffffffffffffffcc}]}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x23d) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) tee(r0, r0, 0x1, 0x1) [ 459.115710] binder: 7107:7109 BC_INCREFS_DONE u0000000000000000 no match [ 459.142340] binder: 7122:7124 unknown command -1332777169 [ 459.147958] binder: 7122:7124 ioctl c0306201 20000780 returned -22 [ 459.155848] binder: 7122:7124 unknown command -1332777169 19:54:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='cgroup2?', 0x0, 0x0) getegid() r0 = socket$inet(0x2, 0x1, 0xffffffffffff0000) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000180)=0x6e) r2 = eventfd2(0x780000000, 0x80800) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x6, 0x8000, 0x3, 0x0, 0x0, [{r1, 0x0, 0x1000}, {r2}, {r3, 0x0, 0x9}]}) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r4 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@ax25, &(0x7f0000000100)=0x80, 0x80000) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x3) 19:54:06 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="04630300"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = getpid() r2 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r1, r2, 0x19, &(0x7f0000000000)={0x40, 0x100, 0x9c, 0xbec5}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) 19:54:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='\x00\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 459.178516] binder: 7122:7124 ioctl c0306201 20000780 returned -22 19:54:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) rt_sigprocmask(0x1, &(0x7f0000000000)={0x100000}, &(0x7f0000000040), 0x8) 19:54:07 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x41) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000440)={0x5, 0x3c, &(0x7f0000000400)="bc08f6e2f4173c3d326da16404325128234ed780252a6c51343eefba2cc2c4ce3982cc20f028f358cd4150fff71f2c016a2bbbaa6f20ecbae3781d57"}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="01144ccb462d4b61934d5a31751db3f9c1737d6741fc9bb47bc5e0b51aea6fe9ba48eb28dcb57ddef693428e97e0b6687e3defd840241075f3a942a8b7097f99d6ce6f61afa8122fd444538235d34991c401e85065068a25e275676cab0f738d74c1fd827735a677bff3c039ed190ced7ec6", 0x72, 0xfffffffffffffffa}], 0x112000, &(0x7f0000000140)=ANY=[@ANYBLOB='user_Xattr,usrquota=cgroup2\x00,inline_xattr,acl,prjjquota=cgroup2\x00,\x00']) 19:54:07 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:07 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x105400, 0x4) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x181302, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0x81, 0xfffffffffffffffc, 0x6, 0x1, 0x800, 0xa41, 0x1, 0xfffffffffffffffd, 0x2, 0x4}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 19:54:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x478, 0x278, 0x0, 0x278, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000100), {[{{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xc0, 0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @loopback, 0x8, 0xffffffff}}}, {{@arp={@rand_addr=0x7, @loopback, 0x0, 0xffffffff, @mac, {[0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x5, 0x10001, 0x3b, 0x9, 0x80, 0x0, 'ip6_vti0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) r4 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x5, 0x400080) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x3c, 0xd, 0x9, 0x8, 0xa, 0x7, 0x6, 0xfa}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="39b62b9c048d755bcf3aad039a353d6c5c281304c4899a523c98a1708d69e622cd81a2c9dabacbfd42a55fa33bc2e28a4e526a84cb56eaf1bdb000027a6fa388204a69c8af32961b7dfa08372b0552ded700a2cb1ce77dec52b955ff9d2a01eae6f0260cb7df7e62a1da647a5030e23e2662e206c62a20810abd1327f5bd56b240fa046a063f7e5f1a6dc6ca50ef55df339fe53392090db96f4f42330f32be3da690d578280c1578e66afe02e60c9fa0617803d8abe22041af6574d0a45c8bd9a138f19496170001000052c5640520efb080b8c0d756105fa50b3beaf9114325f92757cf011f611b35fee00000000000000000000000000000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:07 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x0) r3 = dup(r1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000100)="6778ad9df3fcb7e5a77462") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x30, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1, 0x4}, @free_buffer={0x40086303, r2}, @decrefs={0x40046307, 0x3}, @dead_binder_done={0x40086310, 0x2}], 0x62, 0x0, &(0x7f0000000040)="9b9f17496bcc9a868d618884031da765b6da7256b488b651f11085d6ed027b17eed35b1d681330d69f4eedc7bd5a6c08699126ef5a15f64b6720247e52dbb61dfc19076f295a7769ccbfb4bce7e5dc828819dea705f6cf11067c7888dbcb5dd9fa88"}) 19:54:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) 19:54:07 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) clone(0x4008000, &(0x7f0000000040)="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", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="320fbe0a9f4023ee5cc0ece759c9b10842193504e52d4931b31c2f7efa53f8fc28892b123a6b64d9f15a292a6ac2a635dc1ab66f971c30e67480e1b7f8d5fd77186761de3b4a896ed1b0ebf98efbb7e2e5f4f4f64041a08f8cfca588408ce4effa96fadf72eeec534938f6ff381e073e8f47e8f7c6aafae4931e1afebaaba96780b5786876e652e5c63b08f64500c54e82889822f8fdf033bd049d4cee46e1562f6741dd20d72c7e38396816b3cdfaec744929a32c8a84e1e0e4200821af7a47c1398c56f74c934c061b835cb7fb81a89dea46c6d05e2ae0b2e3e32e61984c1da75150ec") 19:54:07 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x478, 0x278, 0x0, 0x278, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000100), {[{{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xc0, 0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @loopback, 0x8, 0xffffffff}}}, {{@arp={@rand_addr=0x7, @loopback, 0x0, 0xffffffff, @mac, {[0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x5, 0x10001, 0x3b, 0x9, 0x80, 0x0, 'ip6_vti0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) r4 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x5, 0x400080) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x3c, 0xd, 0x9, 0x8, 0xa, 0x7, 0x6, 0xfa}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="39b62b9c048d755bcf3aad039a353d6c5c281304c4899a523c98a1708d69e622cd81a2c9dabacbfd42a55fa33bc2e28a4e526a84cb56eaf1bdb000027a6fa388204a69c8af32961b7dfa08372b0552ded700a2cb1ce77dec52b955ff9d2a01eae6f0260cb7df7e62a1da647a5030e23e2662e206c62a20810abd1327f5bd56b240fa046a063f7e5f1a6dc6ca50ef55df339fe53392090db96f4f42330f32be3da690d578280c1578e66afe02e60c9fa0617803d8abe22041af6574d0a45c8bd9a138f19496170001000052c5640520efb080b8c0d756105fa50b3beaf9114325f92757cf011f611b35fee00000000000000000000000000000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0xffffffffffffff91, 0x0, &(0x7f00000000c0)="130f02cdfb3bc29cf52f4ef92c9b1e8d18cff8d55b1da7b6844553b9dfd76c827495f0ce43ed748c4550141c2bf239ec2fa28330e9b0bee00e77f27252cac13dea91eb"}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000340)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000480)=0xe8) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)="2e0eca5410f9", 0x6}, {&(0x7f0000000240)="bca104671ec8a2fce97c280ff3c21bf67935e1e64945ef2fe6918896299fb59a919047329adf5e9584658877efa9dcf11883fb4723f112b324b829b4c022dfae3f359c9dd01bacbaf5dc21673424a15a179898e1ace9ce4a1c582122fe0bbbaab978df58d3103eba1d110f425d3c5b196f6445d918c2e50e82ec03b64a03490e9df74e49166fa759734d832937471dacf5437fb7366d4769039f7ea4f4f64a2a22277b0deebe1a95492fb51134ef7584", 0xb0}], 0x2, &(0x7f0000000580)=[@rights={0x28, 0x1, 0x1, [r0, r1, r1, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r0, r1, r1]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}], 0xc0, 0x1}, 0x80) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 19:54:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x478, 0x278, 0x0, 0x278, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000100), {[{{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xc0, 0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @loopback, 0x8, 0xffffffff}}}, {{@arp={@rand_addr=0x7, @loopback, 0x0, 0xffffffff, @mac, {[0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x5, 0x10001, 0x3b, 0x9, 0x80, 0x0, 'ip6_vti0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) r4 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x5, 0x400080) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x3c, 0xd, 0x9, 0x8, 0xa, 0x7, 0x6, 0xfa}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="39b62b9c048d755bcf3aad039a353d6c5c281304c4899a523c98a1708d69e622cd81a2c9dabacbfd42a55fa33bc2e28a4e526a84cb56eaf1bdb000027a6fa388204a69c8af32961b7dfa08372b0552ded700a2cb1ce77dec52b955ff9d2a01eae6f0260cb7df7e62a1da647a5030e23e2662e206c62a20810abd1327f5bd56b240fa046a063f7e5f1a6dc6ca50ef55df339fe53392090db96f4f42330f32be3da690d578280c1578e66afe02e60c9fa0617803d8abe22041af6574d0a45c8bd9a138f19496170001000052c5640520efb080b8c0d756105fa50b3beaf9114325f92757cf011f611b35fee00000000000000000000000000000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:07 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x400000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800, 0x0) fanotify_mark(r1, 0x4, 0x8020018, r1, &(0x7f0000000280)='./file0\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r2, 0x408, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xfffffffffffffff7}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32473175}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 19:54:07 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:07 executing program 5: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:07 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:07 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 19:54:07 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) fcntl$getflags(r1, 0x40b) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x401) [ 460.079268] binder: 7177:7206 ioctl 4b41 20000100 returned -22 [ 460.093905] binder: 7177:7206 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 460.102613] binder: 7177:7206 BC_FREE_BUFFER u0000000000000000 no match [ 460.110368] binder: 7177:7206 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 460.118010] binder: 7177:7206 BC_DEAD_BINDER_DONE 0000000000000002 not found 19:54:08 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x3, 0x7f}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@register_looper], 0x0, 0x0, &(0x7f0000000800)}) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x43) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2}) 19:54:08 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x80000000010000) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') 19:54:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:08 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/123, 0x7b}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/230, 0xe6}], 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0xc2, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000000800)}) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x101000, 0x0) 19:54:08 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 460.918485] binder: 7237:7249 ERROR: BC_REGISTER_LOOPER called without request [ 460.927876] binder: 7237:7249 ERROR: BC_REGISTER_LOOPER called without request 19:54:08 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001d80)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001e00)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001f00)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000002000)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002040)={@local, 0x0}, &(0x7f0000002080)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000020c0)={0x0, @multicast2, @local}, &(0x7f0000002100)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002180)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000021c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000022c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002300)={@multicast1, @multicast1, 0x0}, &(0x7f0000002340)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000023c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003880)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000003980)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000039c0)={'veth1_to_team\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000003a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003a80)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003ac0)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000003bc0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003c00)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000003d00)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003d40)={'bond_slave_1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003d80)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000003e80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004000)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000004100)=0xe8) accept(0xffffffffffffff9c, &(0x7f0000004140)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000041c0)=0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000042c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000043c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004400)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000004440)={0x0, @dev, @broadcast}, &(0x7f0000004480)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000004c40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004c00)={&(0x7f00000044c0)={0x718, r1, 0x221, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x160, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x238, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x606, 0x8, 0x9, 0x3}, {0x5, 0xfff, 0x0, 0x5}, {0x8, 0xffffffff, 0x4, 0xffff}]}}}]}}, {{0x8, 0x1, r18}, {0xf0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xff, 0x100000001, 0x0, 0x1}]}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x4000}, 0x1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r21 = socket$nl_netfilter(0x10, 0x3, 0xc) r22 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/access\x00', 0x2, 0x0) r23 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) sendmsg$nl_netfilter(r21, &(0x7f0000001d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200001}, 0xc, &(0x7f0000001d00)={&(0x7f00000009c0)={0x130c, 0x2, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@generic="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", @generic="7f38ed3c1f1749c280d2cc9e976f18edbd50a4429489d57f6127fdf233576de9b5facc1b5e1066b829da25ea530383816ab46c0c7344a547675dc2fb41c78e9dccc922b08c743cfb2fb5dbae8bb372f72680bda3d23d367e071cfb2b1bc9e2107d7cc7ef13b51e1a690bb67141ac74eed827cef9a8844e4dc340362c590dcbadf917297143ed45e050681012532d1a6624588e088beeac3a6e53b63ea787e9803c6c40f1acfad562b6475aca196423d1288e85a6a2cdffcbeb3360605323b90a5ef9f0c4d4cc664ed1e2618a9673375125263a75ac239d75dd8ac1c6e65f5a3fc96a", @typed={0xc, 0x77, @u64=0x2b62}, @nested={0x12c, 0x1d, [@generic="48a5236f80724349fba5e30023c809ecc6c11ceb0f9324a8b946e0ee982e22a5b89395ffdce012e6f3ff2aadae79245db7902ce5f222c4afd92ac3fcdd74fa6c5b7eb45eab3a073e384c2a0466f729d9220bd336570c24ed12f6d9c0e9a5dea4b803ebd03d447ae7355aadd4", @typed={0x8, 0x2d, @fd=r22}, @generic="d6c162573b31a92e5af6a4102c6f153476ca71ccf9a715a5a05e5946558828f7af28c2c5787ba5e3769e8a2ef8c78be9a322854a67140a7f806648cd1a65b73e0ad985b8859d2f93098fc070b8fe2dc3907d9d79158419a5e7d8b3603217326db8d43303becab419a37d41ab1572a53b444e29798f00219b6cae82ea2ee8cf69c7e608fb2acfac9cf8", @typed={0x8, 0x4b, @uid=r23}, @typed={0x8, 0x44, @uid=r24}, @typed={0x14, 0x68, @ipv6=@ipv4={[], [], @loopback}}, @generic="2417f567f04a9c"]}, @typed={0x8, 0x1a, @uid=r25}, @generic="d29b97dffd88fe3033048a0b23942b3b36d477ac8c883c4ebda6c03b7580d804bcb4bcd5d20dfa2d27c8a66fd77c189919836a94aec01566dbbc9c5d9a666ae8b574d772f6720b385b9674dec850ebcd8250b8ded25db4753870a125a11a70c86477cea8e5ce3d4e2c789286466f79feeb35cec2f47c1a322c74755762033745bf06c16ef9bdd7aa45c27d31cf591ba1a613679a7dcb28601e25ef0da8ab0930574fe0f8f183f5b0620f3d8edb5e5a7cbf919f17c391", @generic="fcf83a219fdaf14c5c3252e124c17d91762392c622d9202e1c5339106fbc"]}, 0x130c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r26 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x14000, 0x0) sendmsg$unix(r26, &(0x7f0000000200)={&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000500)="80825ceeabe81f42436ff896097460d452571e4fe8cf593dbd0f7b581659778c590dd6a529432f9cd35549f6e8a49d2e0a3250b1bfe345ea5d9671d71e5fa5ce2217c4c56ba2f166936c30a935e730cfd075afb5f94362fbcc357ef50314cbd4f9a264f39ccfb90df7779ebef695896525ba3aa274b31077feabfaa9fcc18298e83b92b6c57b1097ced3c3f479e417ca896f5d01549577053f21fe94ec1a53d06eaa5a5db61da761d2017bf7122dee6ba4db6949a1da550aefefae0db7f20252d7dd7362d687326ca5298cc595a2109d89", 0xd1}, {&(0x7f0000000600)="23045904dbcf154cc65abd9ffdb294326c4f6768bdea9498c9f543349d1b96f4bd3d0b705cf8b27496c519dd5281f205af388210ffddc4f7a8c6ac5dce8edc4a209c04a5b42103a0", 0x48}, {&(0x7f0000000680)="037c4862437d491c864718d305022525754178d1c66fe9f000ddf9e3ebf88dbc3676c67d9c378dafd07508220ac8831d9bf00b77d4f56512cba8a66292f35c153d824fdc5fae8416279aa5c6b598c2281c4790a36295f4470c886af3ad7d3f4622769658509ad76d89218759fa6df7f485fd43fe45c1666525fc7ad47ae8a8bad78bc01fb1b20ca344d1d57abb3cc9fa63ae644cf558766ea8ce5ab7f7127a496b11f2453942a5c42cf37a4481d1d434eeb109380290468957d45c9b0884b9ed37c7011a23736f5d8645ff68cbcc2308a7c4c83d68", 0xd5}], 0x3}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1f, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="1832c4ce68f38f546fb8b1e6b505a1872ce10cf32bdf9cca156e77e1fcc2fd4b883cc1655c86d4af60806a3cac15e5c55da7", 0x32, 0xe21}, {&(0x7f00000000c0), 0x0, 0xffffffffffffffc5}, {&(0x7f0000000100)="86ad1b11f2b0b3562510ff5159e304da94673b7a8a19243a91e1262636be06e62bb2d227804c2a2e635b2c28a225f17c9ae8263a81ebfa8cfcb7d6414d062840b5ef289e7bcdde378931674183e8c10dd3d61e4acf22deab14149e75b228f1b3047a0b45789786e6111d5d6794bcb6167a781b87209ed502784e88", 0x7b, 0x7}], 0x1000010, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f6d626c6b5f696f5f7375626d69742c6e6f62682c6e6f6d626c6b5f696f5f7375626d69742c646973636172642c64696f726561645f6c6f636b2c696e69745f697461626c652c6461782c006813e5085565a7bda37ab69a512997a9380389ef880f5343d161a4f19ce39a0591ad974d5cd9c15cafd3c1c7503e33a6f4974213dcb2512e53f8338f7ea449ed6d708dd4c3a04e320eeb165a29fdd17612d5a7faae97736f6557b4420eaf1ca0a9a19e7907be3776"]) 19:54:08 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r2 = memfd_create(&(0x7f0000000100)='/dev/binder#\x00', 0x3) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000140)=""/66) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @free_buffer={0x40086303, r1}], 0x26, 0x0, &(0x7f0000000080)="b297e5eaae533562094d11d87d749fd3b0c4c0c1128edf3ff7a00f6475620531af08d7d4a50e"}) [ 460.965770] binder: 7262:7266 unknown command 0 [ 460.974937] binder: 7262:7266 ioctl c0306201 20000780 returned -22 [ 460.984066] binder: 7262:7267 unknown command 0 [ 460.994204] binder: 7262:7267 ioctl c0306201 20000780 returned -22 [ 461.014528] EXT2-fs (loop2): error: can't find an ext2 filesystem on dev loop2. 19:54:09 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000200)=0x44) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0//ile0\x00', 0x210002, 0x100) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x840000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap='nodevmap'}, {@privport='privport'}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x7}}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@msize={'msize', 0x3d, 0x5}}]}}) rmdir(&(0x7f0000000240)='./file0//ile0\x00') ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000340)={'vlan0\x00', {0x2, 0x4e22, @local}}) 19:54:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r2 = memfd_create(&(0x7f0000000100)='/dev/binder#\x00', 0x3) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000140)=""/66) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @free_buffer={0x40086303, r1}], 0x26, 0x0, &(0x7f0000000080)="b297e5eaae533562094d11d87d749fd3b0c4c0c1128edf3ff7a00f6475620531af08d7d4a50e"}) 19:54:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a630000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:09 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000500)=""/200) 19:54:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r2 = memfd_create(&(0x7f0000000100)='/dev/binder#\x00', 0x3) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000140)=""/66) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @free_buffer={0x40086303, r1}], 0x26, 0x0, &(0x7f0000000080)="b297e5eaae533562094d11d87d749fd3b0c4c0c1128edf3ff7a00f6475620531af08d7d4a50e"}) 19:54:09 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x220, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3, 0x2}], 0x0, 0x0, &(0x7f0000000040)}) 19:54:09 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x280001, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) mount(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file0//ile0\x00', &(0x7f0000000340)='cramfs\x00', 0x0, 0x0) fchmod(r0, 0x40) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x8, {{0xa, 0x4e22, 0x10001, @dev={0xfe, 0x80, [], 0x15}, 0x8b5f}}}, 0xfffffffffffffe59) rmdir(&(0x7f0000000080)='./file1/file0\x00') [ 461.802540] binder: 7288:7304 unknown command 25370 [ 461.807925] binder: 7288:7304 ioctl c0306201 20000780 returned -22 [ 461.821485] binder: 7288:7304 unknown command 25370 [ 461.840351] binder: 7288:7304 ioctl c0306201 20000780 returned -22 19:54:09 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x14) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@llc={0x1a, 0x30c, 0x10000, 0xf5, 0x2, 0x34, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="6cf8087f6a90eb6c51ad57d73da4c4fc3fec4e617ce8a22a4bba63080d8e90339e568ada0f0315d39b53ba5ec6a28ca8d798a41a2b1d3a58901b962fad0508bf59d90b0abd54da", 0x47}], 0x1, &(0x7f0000000400)=[{0x98, 0x29, 0x400, "03ea324c063ea9d5cf6d33f4c009e0853532c34ebaadbc62a38d037a974de70ada49651a2f0d46a599b04c3d3a5870620eacf21ff9cd0391cb5788d5352510f020881d59e469d58057922669c203d0aa62ff8e3bdd7ee131e096e6b351beab2083037a8ab19acdceeef8004824cc81d96a0c5f3b097ea17d9eb1d4057d39bc2732f6cf016b85fb"}, {0x98, 0x107, 0x7fffffff, "a3ce9daeae5cc65612cbe2e17acd65350857b886c73f65a092decc76d0b977fa9ec1b88424a7e528be912e9cb630ec1f60910bfe0d709bf2b33777a2531ad24eba2ffe7af4b7a0fff959c5b9f8ff82c6523bc5d79adcaabc29fd54c928da12936943142503d64aaa3deb66be9c9764a9028f0366cfb7af9bb794acc12277fce46a0dd4b3"}, {0x40, 0x119, 0x5, "cf6577a9f85aa0b8e11cc9330ca7cd4a19f2d687b92e9e9cfce9a9104b6ecf1027e30b520bf87bfc01e66604b5a95b47"}, {0xb0, 0x114, 0x9, "df6231ab3fcebdc36b124d27f448de7509a46fed33831aa0db0ae0f45a8ae9ab3b4ef667fbdb367a88def12159ef5f859cc6cc53ecd1ddd9f0026c6edc2584d744641319d514904ce76a7edd45176b6543d2ac1914e90b482ebfd5a737c06fe353e95cd4abac59163d4f55437caf00e258e269c54d5185dc49fd0350ea28cdf6b7624e113529835650101e96a5ead1e3381379caa09303dc424de67b9a520f"}], 0x220, 0x4000000}, 0x24000000) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:09 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x40) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 461.864852] binder: 7320:7321 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 461.888579] binder: 7320:7321 unknown command 0 [ 461.893346] binder: 7320:7321 ioctl c0306201 20000780 returned -22 [ 461.904811] binder: 7320:7321 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 19:54:09 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 461.911741] binder: 7320:7321 unknown command 0 [ 461.917147] binder: 7320:7321 ioctl c0306201 20000780 returned -22 19:54:10 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x29d}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4f8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x228}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc000}, 0x4000001) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x240) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000040)=""/215) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000180)=r4) close(r2) 19:54:10 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x80, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') 19:54:10 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:10 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x2d, &(0x7f00000000c0)={@rand_addr, @dev, @multicast2}, &(0x7f0000000100)=0xc) 19:54:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @local}, &(0x7f0000000080)=0x80, 0x80800) syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x280, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f00000000c0), {[{{@arp={@broadcast, @local, 0xffffff00, 0xff, @empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}, @mac=@remote, {[0xff, 0x0, 0xff, 0x0, 0xff]}, 0xffff, 0x401, 0x1, 0x3, 0x7, 0x7fffffff, 'gretap0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x32d}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0xffffffff}}}, {{@arp={@empty, @remote, 0xff, 0x0, @mac=@dev={[], 0xf}, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}, 0xf0, 0x5, 0x3, 0x6, 0x200, 0x4, 'vlan0\x00', 'veth1\x00', {}, {}, 0x0, 0x41}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="1fadd4e31ecc", @mac=@local, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x10}, 0xc, 0xffffffff}}}, {{@arp={@broadcast, @remote, 0xffffffff, 0xffffffff, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x100000000, 0x6, 0x3, 0x7, 0x2, 0x3, 'team_slave_1\x00', 'dummy0\x00', {}, {0xff}, 0x0, 0x2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @remote, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x10, 0x0, &(0x7f0000000680)=[@clear_death={0x400c630f, 0x1, 0x3}], 0x0, 0x0, &(0x7f0000000600)}) futex(&(0x7f0000000640), 0x1, 0x2, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000740)=0x2, 0x0) 19:54:10 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:10 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x35fe, @mcast2, 0x18}, 0x1c) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:10 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000640)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 462.724470] binder: 7370:7371 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 462.763833] binder: 7370:7383 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 19:54:11 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:11 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'em0\x00'}, &(0x7f0000000400)=""/4096, 0x1000) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:11 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:11 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffd}) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'syz_tun\x00'}, 0x18) fgetxattr(r0, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f00000001c0)=""/226, 0xe2) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) 19:54:11 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) 19:54:11 executing program 4: mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @rand_addr=0x9}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffffa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x404c0d4}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffee9, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000000140)="686657574d9747f3bb865ce3c106889af6322ad63b57a8045259cebcec731e1fd3533def0a0010bfd85a5f23386e2a678850cc5a30a50e2076480182b971ba79437a5afe681f00b4867bde4e2fc87745b569464245ee41fb7947726b"}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) 19:54:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x4, 0x0, &(0x7f0000000800)}) 19:54:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:11 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20881, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f00000000c0)={0x3, 0x0, 0x20000000000000, 0x2c, 0x400000000000000}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000002000000027bd7000fcdbdf250200000104000400070000000400000008009a0a39f20001000001000000000900001300010000008846c9debec8cc8b50014aa4a6543092fd7d71d2879210622b7c0b4c5de6008033fe2c29b2c5130e65a678846a6e3bbe358c081542f06aaaeaa9bfe1e14752f3a317611c58e2848600865a3014c0b5503c4fad1164fc929e0d8fb0e257e6f480633cb32b79b1ddd53c4105c3715288127213745b5a07bf5d33aaa618009d2b4c3cfa6493c177a8c35df33d6fc28b78c375f79e727065c439212e09fca8435d93794e7ee21f96e0be2a4a3d07e200f4dadbc97842059c17f439585a9ff4c8"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4044844) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x140, 0x0) 19:54:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:11 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x800000, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair(0x9, 0x0, 0x800, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) getgroups(0x3, &(0x7f0000001480)=[0xee01, 0x0, 0xee01]) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000015c0)={0x1, 0x2, 0x14, 0x2, 0x3}) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x100011, &(0x7f00000014c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}]}}) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getuid() quotactl(0x1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)="1ca8806c04ee372c569416869036543b2e4c7c77ac38ef743fd3f95a01cc71cc2a64d294cfea0d961615a4a22eccacbc2cdb4b1e7eb3fb72f72d5424a73529ee1cb7792b2fc5b41c00e02f0b4231c802ff8e2262") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xffffff8e, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="eb5008a6826f9b5c523a1718ee384fd3da079ea65c8a847d332c82dddf18a3debde52ae7b455f184cae846d75024641c94ac2600aed4", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)="96634a43f2abfa685f8acfeab2"}) 19:54:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}], 0x3) 19:54:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000469b53cdd700", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) 19:54:12 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0xb) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\''}], 0xa, "b7c8f50b105ab0799e93ef6d57abde4662e680800b21ae854be0162228fa515a370f8fa78b89"}, 0x33) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:12 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) symlink(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000040)='./file1\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f00000002c0)='./file0//ile0\x00') r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x4) mq_notify(r0, &(0x7f0000000200)={0x0, 0xc, 0x1, @thr={&(0x7f0000000100)="f0ad2f76b91ad0bf08280be8d04c0f8cbb700037f7554c900c9a91e8ceac15d1ca5fef2d7678a474b4d655a8faf0c75cb6735dcd1817f5db15c87791d1ef84150aa42ad522dc4c50905596e7c94d10e82dbc40fc417f6d6ef5c86071cb71ff02571d41e7166a5771f28463cb6f89d0d31c88a6a6e7380011de1d2d5d471e60dcf837", &(0x7f0000000400)="853c9e30c1c5bc162e0a2267e4ae038032682ecd4f3acd210ba906a4eff627d914ef380b1849ec0871c8dd0f56aef921a04c64692accc6bcd95c151871b104eab5426e128d034d48984537da82a9d287b2f4674866693f0edf82aa9cd8f85e94dc0ac64063f995d4f4c64eaa6b7946f001ae79f7b166bded447da22cb82fd7fb5a34a32c6d578ff1145947cf1edbfe3b67252ab43c26fe47b8b1fa32b7aca43869b0276692a02800e5d4939643650fb84f9b79afa53c27bbff1e37dd83e02fa1c68db9d03abfad979fc4ba82ccc9c41c2cf4be936eb726bd9e1627eed9b37752a717ee558c971932134066a6c4696f931f5ad3"}}) pipe2$9p(&(0x7f0000000080), 0x800) 19:54:12 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:12 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x4) 19:54:12 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0//ile0\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000080)={{r0, r1/1000+30000}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e23, 0x3, @loopback, 0x8}, {0xa, 0x4e21, 0x0, @mcast2, 0x80}, 0x76, [0x3, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x9, 0x3, 0x5]}, 0x5c) 19:54:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLERROR(r1, &(0x7f0000000080)={0xf, 0x7, 0x2, {0x6, 'bdev--'}}, 0x282) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffe4f, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x0, &(0x7f0000000140)="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"}) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000002c0)=0x1f, 0x4) 19:54:12 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) socket$packet(0x11, 0x3, 0x300) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) ioctl$RTC_VL_CLR(r1, 0x7014) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f0000000100)="51bd38891d94a463d763c767b89c6f904ced65e03e47543e1de724034eeda849f09c3e17774381ffe9393384555396fc978b0e41d4f23e4564ead72c4813920378bc1805a649081bf6d322822e21529dd8b2a57db3cc6ab6b555ae3667a7d9191b0a4b280a9e6423", 0x68) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000001c0)="00001000") 19:54:12 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = memfd_create(&(0x7f00000014c0)='memory.swap.current\x00', 0x1) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) arch_prctl(0x1004, &(0x7f0000001480)="e7f2dc5f7145e55e8af0157863a24e37eb040239b6929890a441ff72cb77e8282ad9cb4a204081") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000001500)={'system_u:object_r:tmpreaper_exec_t:s0', 0x20, 'system_u:object_r:usb_device_t:s0', 0x20, 0x385f, 0x20, '/usr/sbin/cupsd\x00'}, 0x6d) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20000, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000280)={'veth1_to_bond\x00', {0x2, 0x4e21, @multicast1}}) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000012c0)=""/209, 0xd1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0xfffffffffffffe00, {{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x1c}, 0x4498}}}, 0x88) 19:54:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x80000001, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000000)="5cda145c1c3e5fd4647003a36e323b56f3d2cba10e17e967acb291c74c21f3a77a044230fa6163"}) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x65) ioctl$KDADDIO(r1, 0x4b34, 0x1) 19:54:12 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2008, 0x90) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x204000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 19:54:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1000100000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) 19:54:12 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40, 0x0) 19:54:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}], 0x3) 19:54:12 executing program 0: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x4000000) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73797374856d968f7037cb248b0f"]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/72) 19:54:12 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:12 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') removexattr(&(0x7f0000000080)='./file0//ile0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0//ile0\x00', 0x20000, 0x20) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 19:54:12 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$P9_RCREATE(r0, &(0x7f0000000180)={0x18, 0x73, 0x1, {{0x0, 0x4, 0x5}, 0x800}}, 0x18) connect(r0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:12 executing program 5: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80800) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) capset(&(0x7f0000000040)={0x1998032c}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x140, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) 19:54:12 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000240)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$KDMKTONE(r0, 0x4b30, 0x5) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000280)={'\x00', {0x2, 0x4e22, @multicast1}}) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='attr/current\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa9, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES64=r2, @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYBLOB="81423eaa572aa579d38e04e6203e6593bb98864225e98b0d01347e3cd333669e157e8b1a601a171c8772b67fbd5b989580027b6f1202ea7893fd9b63f2746f82f7b353a113879731e6481c21a0c37f0d074ac62e2da90435743ca1857d8cd9f50726ede1238e96a000d8b81d5d9d8e94b8b9", @ANYRES16=r2], 0x0, 0x0, &(0x7f0000000380)}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @loopback}}, 0xf0, 0x1000, 0x100000001, "e8a1e06dd98f42de1c97d45d0fcc905350931ecef93bd72e273e7826d2dc32a542e9ce0983dad1df5e3766754067feed9845ec7ebbed366096b33c605e0549bd13fd32346adb9ebf14208aad902c86eb"}, 0xd8) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)) r4 = dup(r1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x35}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) 19:54:12 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:12 executing program 5: gettid() r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0) fcntl$getown(r1, 0x9) fcntl$setpipe(r0, 0x407, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) capset(&(0x7f00000001c0)={0x3998072e, r2}, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x400, 0x0, 0x800000000000}) setrlimit(0x1e, &(0x7f0000000000)={0x0, 0x7ff}) 19:54:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0]}) 19:54:12 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getpid() tgkill(r1, r2, 0xd) 19:54:12 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) rmdir(&(0x7f0000000240)='./file0//ile0\x00') setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0xbf, @multicast1, 0x4e20, 0x3, 'rr\x00', 0x10, 0x6, 0x7e}, 0x2c) 19:54:12 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@sco, &(0x7f0000000100)=0x80, 0x80800) sendto$inet6(r0, &(0x7f00000001c0)="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", 0x1000, 0x800, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @local, 0x6}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000000)={0x0, 0x100000001}) 19:54:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="5280914d32dc45924a2d8dfb8d008fc95b", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) prctl$getreaper(0x7, &(0x7f0000000080)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x20}, 0x4) 19:54:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000800)}) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) [ 465.261550] binder: 7571:7572 unknown command 0 [ 465.266876] binder: 7571:7572 ioctl c0306201 20000780 returned -22 [ 465.291079] binder: 7571:7572 unknown command 0 [ 465.296636] binder: 7571:7572 ioctl c0306201 20000780 returned -22 19:54:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}], 0x3) 19:54:13 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2100, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:13 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:13 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$UHID_INPUT(r0, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:13 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0//ile0\x00') 19:54:13 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000180)=0x3) 19:54:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x186) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:13 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x80000000) 19:54:13 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:13 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x10400, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r3 = getegid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}, {@fscache='fscache'}, {@noextend='noextend'}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@msize={'msize'}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_loose='cache=loose'}]}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x2d84318b808123dc) chdir(&(0x7f0000000040)='./file0\x00') mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x100, &(0x7f00000000c0)={0x80000000}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:13 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0xffffffff) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x1f}}, 0x18) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:13 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x80, 0x0) sendto$unix(r0, &(0x7f00000012c0)="834b012899afb0fe3fecdfb42c91d566210559e3c7f4c63f99da734d098cb9251b759f768ba2b3f5a1a1989e0749ed2f2c0009446688ab1bb325d6ea062f5edd91f0c26fae25d47baba6467fcf048e1346ac684d4dea4b646a3251e1fd0d6005a22ae8ecc70259c25148c31583158c38b7070c1e3ec8a8b493dcdfeb65febb8617158d2dfa38ebf4769f9245ea80f8ac213b48c8c1f0dcf60dc3c5e475a7b01db039ff81214afedc1507d679d648d8088eb3bd2111e93ee25cda792733024d2dbe6c480f956698a034db62c948c1ba7dc1f640ea5a3695e1c175c37b5e386e5dddf82629af5766e86fed21cb", 0xec, 0x20000000, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:13 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x1f}, @ipv4={[], [], @rand_addr=0x8}, @dev={0xfe, 0x80, [], 0xf}, 0x6, 0xd, 0x33, 0x400, 0xffffffff, 0x2000000, r1}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000280)={{0x0, 0x1, 0x0, 0x2, 0x2}, 0x5, 0xa76, 'id1\x00', 'timer0\x00', 0x0, 0x7f, 0x401, 0x2, 0xffff}) r2 = getpgrp(0x0) capset(&(0x7f0000000240)={0x20000019980330, r2}, &(0x7f0000000200)={0x80000000, 0x2000000000000000, 0x0, 0x0, 0x4aa7}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:13 executing program 0: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x7f) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000280)) write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x2}, 0x7) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) setsockopt$sock_int(r2, 0x1, 0x1f, &(0x7f0000000080)=0xffff, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x128, 0x0, &(0x7f0000000800)}) 19:54:13 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xa, &(0x7f0000000000)={0x0, 0x100000001}) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/177) 19:54:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}], 0x2) 19:54:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3f, 0x100) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x80, 0x8, '9P2000.u'}, 0x15) pipe2(&(0x7f0000000140), 0x84000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) memfd_create(&(0x7f0000000040)=']\x00', 0x1) 19:54:14 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:14 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x103600, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x1f, 0x6, 0x5}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x4, 0x2, 0x3, 0x1}}, 0x26) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:14 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x3) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10117000, 0x1e8) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:14 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:14 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={&(0x7f0000000040)=""/87, 0x57}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d630000bdde0068f4c42d2512d5e67c64221853cc3291dcf9f0929787543c61d1a1e2fa3874b7dc62ab278ac2a477dfefda45ac639208460ff0156908fac1b2209d887107387a244132caaee6d6f95ee6d3e94e66abe2f0413df75833aea5ac67d8c9d6bb418bd1ce15bc3d4a1f6e5c9098a9d3e7fd113fd19ac98b4de26c4b06211c503834857a19d73640c8304975a61c2aa2e9ed9d2c915f973b4d0ed53a0912"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) modify_ldt$read_default(0x2, &(0x7f0000000140)=""/166, 0xa6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 19:54:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:14 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x80000) write$P9_RREADDIR(r0, &(0x7f0000000040)={0x93, 0x29, 0x2, {0x5, [{{0x41, 0x2, 0x5}, 0x2, 0x3, 0xd, './file0//ile0'}, {{0x8, 0x1, 0x3}, 0x0, 0x7, 0x7, './file0'}, {{0x0, 0x1, 0x7}, 0x6, 0x0, 0x7, './file0'}, {{0x0, 0x1, 0x7}, 0x3ff, 0x2, 0xd, './file0//ile0'}]}}, 0x93) 19:54:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x40, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x510) 19:54:14 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000420400, 0x0) write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) setrlimit(0xe, &(0x7f0000000000)={0x0, 0x100000001}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) 19:54:14 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8000, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsync(r0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:15 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}], 0x3) 19:54:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:15 executing program 1: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x847ff) r1 = socket$key(0xf, 0x3, 0x2) connect$l2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x3, 0x3, 0x4, 0x3}}, 0x26) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in=@dev}}, {{@in=@multicast1}}}, &(0x7f0000000080)=0xe8) 19:54:15 executing program 5: capset(&(0x7f0000000040)={0x200f1526}, &(0x7f0000000180)={0x0, 0x20000, 0x4}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x5) 19:54:15 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:15 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) faccessat(r0, &(0x7f0000000040)='./file0//ile0\x00', 0x80, 0x300) 19:54:15 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) lremovexattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)=@random={'security.', 'proc\x00'}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d630015"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:15 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x2) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/187) 19:54:15 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x840, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:15 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002480)=""/4096, 0x154) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000011c0)="6c27db8c42747e054e52fbac60e9dc49c844b117911c813fafda8cdce269bc9b066b6f7b9a07b985a2ccf1894140e8ba27dc725b9d68c9b99f68c0934db93187322e79f90c7714fd5453ac589a008af945b8ce1bd580") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) recvfrom$inet(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x40000002, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) 19:54:15 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) 19:54:15 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x3, 0x9, 0x2, 0x8, 0x40, 0x5}) 19:54:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='sched\x00') ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000440)=0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0x7, &(0x7f0000000380)={0x1000000000000, 0x100000001}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) getpgid(r1) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0xbbea, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)="f826f7bdc6cec5d8b12725a2b000e2e39cedd3cc444929f3f34a374a8057149906f0272d9ba6c991c47cde2ced988407ee18bdf68c496feab56ad3d81cf9ede35598ad111b2931e7b62cb28c2ff1a83341acd6edc80dd92548d95945a63cebf472f5e7de3924d18233ec424d3a53b793e1e6c3e81f0ba5f6362ad2d14e27ed9eb0051f3be48f2f0eb7fefa03e4c4b770ba8a98f0d99791265dfaddb1ae738cc59b5c75bcc1cae2fe977f2a2d7ab2afbf3dcf0b3a9b6c3bdb5be49b76f18537bf82a61a673ec03551", 0xc8, 0xfffffffffffff98f}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6d61700e2366662c00"]) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) 19:54:15 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) fdatasync(r0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) [ 467.781627] binder: 7722:7741 unknown command 352346893 [ 467.790743] binder: 7722:7741 ioctl c0306201 20000780 returned -22 [ 467.799404] binder: 7722:7741 unknown command 352346893 [ 467.809106] binder: 7722:7741 ioctl c0306201 20000780 returned -22 19:54:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200000, 0x80) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000080)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x8, 0x28, 0x1, 0xffffffffffffff9c}) 19:54:16 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001480)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0), 0x0) 19:54:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}], 0x2) 19:54:16 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:16 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x4000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=@deltaction={0x84, 0x31, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x8000, 0x400}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0xe, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) rmdir(&(0x7f0000000240)='./file0//ile0\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000180)='./file0//ile0\x00', 0x4) 19:54:16 executing program 5: r0 = getpid() capset(&(0x7f0000000040)={0x399f1736, r0}, &(0x7f0000000180)={0xc28, 0x0, 0x3fffffffffffe, 0xffffffffffffffff, 0x0, 0x3b}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:16 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x263, 0x0, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000800)}) fcntl$getflags(0xffffffffffffffff, 0x40b) 19:54:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0), 0x0) 19:54:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:16 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0x17}, 0x8f}, 0x1c) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000012c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x400, 0x0) openat$cgroup_procs(r2, &(0x7f0000001380)="00bcf82f08a6125642b6a1cf531ce9936940955b12400000000000", 0x2, 0x0) 19:54:16 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 19:54:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0xf91, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000), 0x10) recvfrom(r1, &(0x7f0000000100)=""/202, 0xffffffffffffff7f, 0x2000, &(0x7f0000000200)=@generic={0x0, "f65bb1c12e35a503dfda7759b6bb2564b62bdb3eb5f5ef0ed94737ad0d0d78b5062e3e27adc1ad5299d1862a60b4263f81ed33e3ce3a12bc2e525d47d20b282a7a7cd6be86ec402ea7e38c85335acf9d822f942c9b8acdbe4ce8f7c9407353be81359b68713215198e413dbfadb379a933c8534a3fa751447408923e1321"}, 0x70c000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0363084085487ec46665da0f75ec427bd045f999a1d5f7377712e46c216519b216948b38d807064e8af0c38bb088a56ff03358ce343cbfb6fae3792f71c4fe5d170084506388fd2f61a529ccc66c3e2e3b04566fef919707bbe4000000000000000000000000000000", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) 19:54:16 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="d06dd6258b4d65d186f68aba4a67c53682b9e4b7c8f80c80f675831550858c26b5", 0x21}], 0x1, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x200041, 0x44) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r2, 0x7) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:16 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x4, 0x0, 0x4}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x7f, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630840ce3f66bb47f42c4f8a85030000000000004ea9000009000000000000008fdb0f763315f746907b1f1bdfc8c1405bc841dcadf16f149c66c936bb6e314fc3b17bf148c13a0463c5f046e51113fe8c6e94e941d7e1259a7c6d02598b6ef86a60fac4fb96a9306e502e2ddfb7e4caf6000c8c0825eb12f490", @ANYRES32], 0x0, 0x0, &(0x7f0000000040)}) 19:54:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0), 0x0) 19:54:16 executing program 5: fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f00000000c0)={0x8001, 0x10}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:16 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x92000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0x98, ""/152}) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r1}) inotify_add_watch(r0, &(0x7f0000000040)='./file0//ile0/file0\x00', 0x802) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2d70696473200072646d61202b6d656d6f7279202b72646d61202d70696473202f696f202d6d656d6f72790e202d72646d61820f912d36214db73045643f5f12541a3b46993fc39d92c5c811dab42797f1164094314257cfc2d5e2f692100ada1eeb174a49f4ffe6a6576c9e8db16e98f79a56a0d4aa2604f03c2115a3aa236a3ae86cea924e895ab6e1ea656a1483aa27d69e4974eea9d4c3e33c9941da1931a1fdb03c23db8ef3825c87b9981a0f44aa0ffa463b2b618e6a3a3929c9a455c9ced76b179d8aec6f04be1e0c87fca0fc26bd1f188a8e12f96eec4aafedab8ba735f919e71f9cb2358ed66451da1145338ef74d"], 0x32) rmdir(&(0x7f0000000100)='./file0\x00') ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x7) 19:54:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:17 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:17 executing program 5: setrlimit(0x9, &(0x7f0000000340)={0x2, 0x6}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x0, 0x3, 0x1, 0x1, 0x9}}) getsockopt$sock_buf(r0, 0x1, 0x14e53b065c55db83, &(0x7f0000000200)=""/248, &(0x7f0000000300)=0xf8) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/83, 0x53) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x411, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x83}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) iopl(0x5) 19:54:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2bc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r0, 0x8, 0x6, 0x7f) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0x2, 0x80000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x82000, 0x48) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000300)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f4") ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000003c0)=""/224) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000000380)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000340)=0x2) write$selinux_load(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75785c8077d1cb7fbd499fabbad2a3c43a39a5bb950c2987a0f5065b32beebb8bba6f733dbe5b036ff43df4d50e4735787980900abb1400dd314eea2862c50f62adda197380e3120305cdb5f24991a5838cdd4e920f1168b0800d01f16fd43b7e05a78ef5c10e9009217fae6b3782a2c47ecce5e7aa959be7c52cd47ed1e42f6af04dc95dc1c09e19ac0f8c101862d98fce8414d7c25f8b93e1113128043ad00e1c169ecf6"], 0xb3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001940)={'ip_vti0\x00'}) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r7, 0x914, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) 19:54:17 executing program 2: clone(0x0, &(0x7f00000012c0)="1ee91834e9f7bf86c4f100a8ff41ef899a0da5ea04acf79e7eef70baae527ffdd1995ed80bfaf54feae19801eaa602752ab559d671795853b07fca315569bc3a268e56489c09420cd466a3c3c94b26c794610b0b50a182de8e9e3113cdcdba41f3e246b0911f504acba1249d29394eeabc0c9776debbac50e7e35459ef46ad329f418b4cebd21cfd351ab2074e8886d8693801224775641b7bad0dd78f2843ecb55251f0e1c9dc16530fe3171af2cad6bb11e989baa2", &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000140)="21bcdd815bed1099def9036254d54ddc2ef400cbcc0a264ca3f3b04fb97f1198d7bb85ad3399b224010a8b3b90f28a5cb9053e80f8f8dd") mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x181000, 0x80) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000001380)=@known='security.ima\x00', &(0x7f0000001480)=""/191, 0xbf) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000001c0)={0x0, @rand_addr=0x3, 0x4e22, 0x0, 'lblc\x00', 0x2, 0x7, 0x24}, 0x2c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x101100, 0x0) openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:17 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5, 0x2, 0xfffffffffffffe01}, 0x7, 0x3}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="eeb50000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:17 executing program 5: setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x7, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x20002, 0x0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000200)='.dead\x00', 0x0) 19:54:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x4013, r0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400, 0x0) 19:54:17 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x402, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x110, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x240f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7cca}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0xa}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8814}, 0x40010) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) 19:54:17 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000140)=@un=@abs={0x0, 0x0, 0x4e24}, 0x358) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:17 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x10001, 0xfffffffffffffff9}) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='children\x00') setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000200)=0x78, 0x4) r4 = socket(0x1b, 0x5, 0xffffffffffffffe5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@loopback, 0x4b7, 0x3, 0x0, 0xf, 0x5, 0x503, 0x3}, 0x20) 19:54:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x44010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x30, 0x8, &(0x7f00000000c0)=[@flat={0x77622a85, 0x100, r1, 0x2}, @flat={0x776a2a85, 0x1, r2, 0x3}], &(0x7f0000000140)=[0x0]}, 0x3}}, @dead_binder_done={0x40086310, 0x4}, @release={0x40046306, 0x2}], 0x56, 0x0, &(0x7f0000000200)="8acef7943b5995710e03112c8bc19e064cd8abb752f34a6133e1da3626dde32f9ee12130a99a19ac48211c606814a991d101b8b95aca4b926eca3d5fc66fd86ae417db7c9e354b740d4d0b2604ad6299eceda3cd5ca4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:17 executing program 5: capset(&(0x7f0000000040)={0x19980334}, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x7}) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0x100000000}) 19:54:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) [ 469.576176] md: Autodetecting RAID arrays. [ 469.581869] md: Scanned 0 and added 0 devices. [ 469.593476] md: autorun ... [ 469.605080] md: ... autorun DONE. [ 469.654041] IPVS: length: 8 != 1182400576 [ 469.663028] binder: 7896:7918 unknown command 46574 [ 469.674828] md: Autodetecting RAID arrays. [ 469.674850] md: Scanned 0 and added 0 devices. [ 469.674863] md: autorun ... [ 469.674869] md: ... autorun DONE. [ 469.691691] binder: 7896:7918 ioctl c0306201 20000780 returned -22 [ 469.699904] binder: 7896:7918 unknown command 46574 [ 469.704948] binder: 7896:7918 ioctl c0306201 20000780 returned -22 19:54:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0), 0x0) 19:54:18 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:18 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) socket$nl_xfrm(0x10, 0x3, 0x6) write$selinux_validatetrans(r0, &(0x7f00000000c0)={'system_u:object_r:anacron_exec_t:s0', 0x20, 'system_u:object_r:systemd_unit_file_t:s0', 0x20, 0x6, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x87) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:18 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 19:54:18 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) ptrace$cont(0x27, r0, 0x6, 0x3d) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03060840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000200)={0xa, 0x4, 0x7745834f, 0x100}, 0xa) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1\x00', r4}) 19:54:18 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000006880)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1, 0x0, 0x0, 0x9f}, 0xffffffffffffffff}, {{&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000008c0)=""/209, 0xd1}], 0x7, &(0x7f0000000a40)=""/115, 0x73, 0x7}, 0x1}, {{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000b40)=""/147, 0x93}, {&(0x7f0000000c00)=""/95, 0x5f}, {&(0x7f0000000c80)=""/171, 0xab}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000e00)=""/58, 0x3a}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/248, 0xf8}], 0x8, &(0x7f0000001fc0)=""/146, 0x92, 0x101}, 0x400}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002080)=""/79, 0x4f}, {&(0x7f0000002100)=""/89, 0x59}, {&(0x7f0000002180)=""/88, 0x58}, {&(0x7f0000002200)=""/137, 0x89}, {&(0x7f00000022c0)=""/167, 0xa7}], 0x5, &(0x7f0000002400)=""/104, 0x68, 0x9}, 0x7}, {{&(0x7f0000002480)=@alg, 0x80, &(0x7f0000003700)=[{&(0x7f0000002500)=""/177, 0xb1}, {&(0x7f00000025c0)=""/35, 0x23}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/209, 0xd1}], 0x4, &(0x7f0000003740)=""/247, 0xf7, 0xfb}, 0x8}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003840)=""/13, 0xd}, {&(0x7f0000003880)=""/200, 0xc8}, {&(0x7f0000003980)=""/154, 0x9a}, {&(0x7f0000003a40)=""/53, 0x35}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/211, 0xd3}, {&(0x7f0000004b80)=""/6, 0x6}, {&(0x7f0000004bc0)=""/212, 0xd4}], 0x8, 0x0, 0x0, 0x2}, 0x8000}, {{&(0x7f0000004d40)=@nfc, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004dc0)=""/2, 0x2}, {&(0x7f0000004e00)=""/84, 0x54}], 0x2, &(0x7f0000004ec0)=""/144, 0x90, 0x3ff}, 0x6}, {{&(0x7f0000004f80)=@sco, 0x80, &(0x7f0000005140)=[{&(0x7f0000005000)=""/43, 0x2b}, {&(0x7f0000005040)=""/31, 0x1f}, {&(0x7f0000005080)=""/168, 0xa8}], 0x3, &(0x7f0000005180)=""/8, 0x8, 0x3}, 0x7b9e}, {{&(0x7f00000051c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000006400)=[{&(0x7f0000005240)=""/226, 0xe2}, {&(0x7f0000005340)=""/111, 0x6f}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)}], 0x4, 0x0, 0x0, 0x7d}, 0x180}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f0000006440)=""/203, 0xcb}], 0x1, &(0x7f0000006580)=""/128, 0x80, 0x4}, 0x81}], 0xa, 0x40000000, &(0x7f00000068c0)={r0, r1+30000000}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000006900)={'bond_slave_1\x00'}) rmdir(&(0x7f0000000140)='./file0//ile0\x00') ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x4, 0x81, 0x7fff, 0x0, 0x2, 0x80, 0x1, 0x7, 0x7, 0x3, 0x85e, 0x81, 0xffffffffffffffff, 0x80, 0x6, 0x2, 0x6d7, 0x5, 0x4, 0x7, 0xfff, 0x7, 0x313be025, 0x0, 0x8, 0x5, 0x7, 0x7fff, 0x1, 0x8001, 0x80000000, 0xffffffffffffff62, 0x4, 0x1, 0x2, 0x0, 0x7dec, 0x2, @perf_config_ext={0x2, 0x3}, 0x0, 0x401, 0x3ff, 0x7, 0x5, 0x7fff, 0x8}, r3, 0xd, r4, 0x1) 19:54:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="196f00385e00"], 0xa0, 0x0, &(0x7f0000000040)="7f70ba52cf2f1530ad8700d8c54d1c94d3746ea10d7d3ecc1006876c3cf505d8d3aab107d52f257cadbe763596ff605e6df77e209814e2fa74b1343063de46b5530ac5f282d86a1ae6a4f518d14889d2318753ef1ae8ad013f5950ef7153425adc6c946c8abb5d46883fedf295cd8fa2e1d58483a66997f1b776023328525e42893691c58811bb91f9e6a47f8cc6055e012e74dfa3e8efd4bc30ec6228e07d97"}) chmod(&(0x7f0000000000)='./file0\x00', 0x2) 19:54:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0), 0x0) 19:54:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) readv(r0, &(0x7f00000005c0), 0x0) 19:54:18 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/pktcdvd/control\x00', 0xc00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'ip6_vti0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001940)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001a40)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001a80)={{{@in=@local, @in=@loopback, 0x4e22, 0x0, 0x4e22, 0x8, 0xa, 0xa0, 0xa0, 0x4, r1, r2}, {0x9, 0x0, 0x7f, 0x2, 0x80000000, 0x6, 0x21, 0xecc}, {0x100000000, 0x2, 0x1, 0x4}, 0x2, 0x6e6bb5, 0x1, 0x0, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4d3, 0x6c}, 0x2, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, 0x3500, 0x7, 0x2, 0x6b2, 0x1, 0x4089, 0x80000001}}, 0xe8) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$getown(r3, 0x9) getdents64(r3, &(0x7f00000002c0)=""/4096, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000012c0)=0xc) chown(&(0x7f0000000180)='./file0\x00', r4, r5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x8100, 0x0) openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$inet6(0xa, 0x0, 0x3) 19:54:18 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x8200000) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x101000, 0x30) futimesat(r0, &(0x7f0000000080)='./file0//ile0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) rmdir(&(0x7f0000000000)='./file0//ile0\x00') rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000140)={0xe4be, {{0x2, 0x4e23, @remote}}}, 0x88) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f0000000040)}) 19:54:18 executing program 7: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 19:54:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0363015b00000000000000c066a0", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r1, &(0x7f0000000080), 0x8) 19:54:18 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r0, 0x8, 0x6, 0x7f) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0x2, 0x80000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x82000, 0x48) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000300)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f4") ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000003c0)=""/224) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000000380)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000340)=0x2) write$selinux_load(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75785c8077d1cb7fbd499fabbad2a3c43a39a5bb950c2987a0f5065b32beebb8bba6f733dbe5b036ff43df4d50e4735787980900abb1400dd314eea2862c50f62adda197380e3120305cdb5f24991a5838cdd4e920f1168b0800d01f16fd43b7e05a78ef5c10e9009217fae6b3782a2c47ecce5e7aa959be7c52cd47ed1e42f6af04dc95dc1c09e19ac0f8c101862d98fce8414d7c25f8b93e1113128043ad00e1c169ecf6"], 0xb3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001940)={'ip_vti0\x00'}) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r7, 0x914, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) 19:54:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) socket$netlink(0x10, 0x3, 0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$selinux_user(r1, &(0x7f0000000180)={'system_u:object_r:tmpfs_t:s0', 0x20, 'user_u\x00'}, 0x24) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0xf60, 0x0, 0xbe}) chroot(&(0x7f00000001c0)='./file0\x00') [ 470.388481] binder: 7958:7960 unknown command 939552537 [ 470.397255] binder: 7958:7960 ioctl c0306201 20000780 returned -22 [ 470.453784] binder: 7958:7960 unknown command 939552537 [ 470.464819] binder: 7958:7960 ioctl c0306201 20000780 returned -22 [ 470.483994] md: Autodetecting RAID arrays. [ 470.484001] md: Scanned 0 and added 0 devices. [ 470.484013] md: autorun ... [ 470.484014] md: ... autorun DONE. 19:54:18 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:18 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400000, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0)=""/206, &(0x7f00000000c0)=0xce) setrlimit(0xe, &(0x7f0000000080)={0x0, 0xfffffffd}) 19:54:18 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000000000)="c6ee78c8903149811128699b1e10ecac82195977e05ea9e0814c08a80e5c26ed6eb99033969b01d364869b426d3061dc870528d4fb387ce3ce23aeae87c7cd241e85d187c722eddaaa3b2143e431715a1b00869f8f76fb2b750f0dcfdae04cc9134bcb6e1c85991326d9e571e7ad0b88095edec450db8a74e9fd8131d5b63b352e758c6bd1090701c614c495d74b09723e8c5acc0205ced4171cab92f88b817e8679ddbea4161b221a7b1d2187b16372a439674a4588e90b67f84b2fce2e052c2764367d70209062609bb5389d819af47116d687bf96f806afa68c31c144f9c5b78c788ccaf4c0", 0xe7) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0xffffffffffffffff, 0x0, 0x2, 0x3, 0xfffffffffffffffc}, 0x81, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0xfe, 0xfffffffffffffe00, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)}) 19:54:18 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40000, 0x0) write$eventfd(r1, &(0x7f0000000180)=0xd25, 0x8) 19:54:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x4013, r0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400, 0x0) 19:54:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$TCXONC(r1, 0x540a, 0x80000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:18 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:18 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fff, 0x40) rmdir(&(0x7f0000000100)='./file0\x00') 19:54:18 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000140)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000021c0)=""/4096) getdents64(r1, &(0x7f00000000c0)=""/43, 0x2b) getsockopt$inet_tcp_buf(r1, 0x6, 0x1b, &(0x7f00000011c0)=""/4096, &(0x7f0000000000)=0x1000) 19:54:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x105000, 0x0) lseek(r0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x400000, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/member\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03631f40523c80f9ec6ef5f9ad1964a0a56669e2521a5a817efeb7faebd10d5bba40024615c4b19dd6bf2ed73fe4f20b7a52a4ec2080954dd054616afdd4f5b87972ae31923e651c94f00c8e1169b7d044d461bfb4e3af9976a1e8da592a94ef060058134acdc3dc40dd5cc228f1b757e74d0557528041128faeec48ac4cba2bc2676ac8caa71ffe37bdccd607133c00a1f018d9cec6374ba88fd9a41b4e5c6f06f3d1c4f76063f1b88463c1e0476271dae82ae15a0d2adf8ebf3c7bf734066f39189ad578353f4276", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) lseek(r3, 0x0, 0x3) write$P9_RXATTRCREATE(r4, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) 19:54:18 executing program 7: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x2a7, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)="6370757c302626210000010000019cd30e35a01d3d040a1c60666f8dcc6d5c76fd2e9e09626b31deea1b0d3b8184872d58b62cc5b4223726b5797482fb1d83f82e2d2000000028e9604401695c8d6c866c68a8fc80de2c4b74f423c55d593bc13676f9890906be2aaa26bd1678518ef3d61afdd00427799b7ce4b70845ed9780731957b75bf0253e4d4df598be5e3d7121a60f70013200bbbe9d5835af657010520b26afa8247f3756ed4c4a34cf0701d5540acac2865fc1ce8ded62538de97482f4317a7772e66f88e5e3e7476378c0914901000000010000004b9ee55ba00a0f04a6b07345298ad052c3c12c62201c2349527a36fe4a7edad75ffe1fe586b1787526fbf2bfe87f9193ab05003485866c8d000000000000000000000000000000") 19:54:18 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) 19:54:18 executing program 5: sysinfo(&(0x7f00000000c0)=""/139) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x9, &(0x7f0000000700)=[{&(0x7f0000000200), 0x0, 0x1f}, {&(0x7f0000000240)="af42de0876d6bbb00a2f46d246f5c42f2d543bd2788d3cf664274a947b4fea78882d1f48296d784329c3ee9c975cda182ca44f5ea8d022ae0ea3bd3dfdf594b775f2786a4ba8da56e3b34371f87744bb15ce85bc4be82b0f13a7e8bfee8e778655bb2f2cf57c88fd68b2ad2c41ee", 0x6e, 0x9}, {&(0x7f00000002c0)="437138dfdc9b0da1a13fad282b7379d64366efd692747a9526c9119783208b4f6a242a6a2a63e9b2e53f", 0x2a, 0x1}, {&(0x7f0000000300)="be8a", 0x2}, {&(0x7f0000000340)="4f3b478d34add3ce5cba0bd46c8005cf0cee23af75e2ad64f8500698e4ceb1a77e8ca5cbfefa9f324a8743bdc0ad59c8086634c562264dfcfb71e53effbcfb9f54704fe45f0b7e96113ceae0db3376684c6cca1061e86fe638acb884b440629fd5bb87a613428eb06ffccc3c76b6063b8b52954b687998b4e13a09717b151c49218731380dd7db1cd0851904e71ce82e254078d6338fce538326e9dc7ab8402153172a6363d0e1c1550348010de275cd93c892a881a1ece85f75be5bd3eef88d01a0eec25b33248325e51a20a672a6d20047a6", 0xd3, 0x3}, {&(0x7f0000000440)="2691b03fc72f90ea1b96fdc27d4a3bdf8c788fa02dff917c4969ba0108d4a24d7fc86fef9a22583715bc88ab3a1c128e283e08157c1830c98d8df7e816d564c14837236438d06b809909384e8c5e7c9cd9d0cef7335ce84926d3c00b5286e7dd945a73f1d6bbe67c4bab8e503f326dcbee163afa187bd77609f5b9cb4cb01120983568d45f13e92429efa23001d3ccd87385f357bbcde9aed5", 0x99}, {&(0x7f0000000500)="61db1a7d327232875a267745e32fc93a8e02bd6a99cffd507f84c8dd8931295b17ce905fadc6ec4a09de0518165a12edb17f540dadf2cd3186daa641d8589811b3523054b4bcc358f7bffdbd7465769b6b22831d8373dcec1976ef7b7b4df19d2944e4940f3e2fdb5fd2f081a9029fbbd5a054fc042c857ed20bef3be796e3bae25b42e39ef809c0047f88", 0x8b, 0x6}, {&(0x7f00000005c0)="dc17d75910e7af9b1143da66118f1726a7bbc3a9591e89cf53a46c4119d5f92814be71da72ab2ec235acc863a1e28baf634372c983b25bbe57e196a1f10b08ff84d6da89a12563b9cf44c341f0f8d8be697a23ebcb13be9729669e1b0ccb2c6da1e9da2f20d848d86585dd66cb1cdf0b6ac109634b7654a14ee0e6d2ca60c448228874453bd8674cbc4cc442dfa1", 0x8e, 0x762}, {&(0x7f0000000680)="35df9046739a6d133bf20206c7f933b65b6ac774ff4f07cb7266bfb7ad82ad54d7991c35f24854644d29093690400e58a360399672559f800de737a066a4fb0d24264dcb984cd20aa21060cdc3", 0x4d, 0x10001}], 0x800010, &(0x7f0000000800)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@metadata_ratio={'metadata_ratio'}}, {@fragment_all='fragment=all'}]}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) getresuid(&(0x7f0000000200), &(0x7f0000000880), &(0x7f00000008c0)) 19:54:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1325258a", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) 19:54:18 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x6, 0x2, 0x6}}, 0x14) rmdir(&(0x7f0000000240)='./file0//ile0\x00') [ 471.209824] binder: 8010:8012 BC_FREE_BUFFER u0000000000000000 no match 19:54:19 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = dup2(r0, r0) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0)=0x653, 0x4) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) 19:54:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000080)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d000000326151eae5c5185dd366f8d89bfb16909f83f58d015e36ba95"], 0x0, 0x0, &(0x7f0000000800)}) signalfd(r0, &(0x7f0000000040)={0x3}, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20001, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000180)={{0x0, 0x7f3d}, 'port1\x00', 0x30, 0x1800, 0x9, 0x0, 0x1f, 0x3, 0x8, 0x0, 0x1, 0xfa0d}) write$selinux_validatetrans(r1, &(0x7f0000000100)={'system_u:object_r:device_t:s0', 0x20, 'system_u:object_r:var_log_t:s0', 0x20, 0x2, 0x20, '/usr/sbin/cupsd\x00'}, 0x62) 19:54:19 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:19 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f0000001340)='./file0\x00', 0x80) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000280)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000001480)={'#! ', './file0', [{0x20, 'selinux'}], 0xa, "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"}, 0x1013) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x7fff, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20}, {0x2, 0x4e24, @remote}, 0x186, 0x34, 0x8, 0x6, 0x400, &(0x7f0000000040)='ip6gre0\x00', 0xa19e, 0x5, 0x8}) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x48a080, 0x4) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000240)={0xa, 0x2, 0xe065, 0x800}, 0xa) 19:54:19 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) ftruncate(r0, 0x1) setrlimit(0x9, &(0x7f0000000000)={0x6, 0xdb8}) 19:54:19 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 19:54:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) r1 = memfd_create(&(0x7f0000000040)='/dev/binder#\x00', 0xa14827e52cb4eb31) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x51c, 0x1, 0x1, 0x48a, 0x77a50168, 0x1000000, 0x1, 0x8, 0x7f, 0x5}) 19:54:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x404400, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000040)={0x19980330, r3}, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8080, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000300)={0x7, 0x4, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f00000001c0)) ptrace(0x4219, r2) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/114, 0x72}, {&(0x7f0000000140)=""/20, 0x14}], 0x2, 0x0) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:19 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)={{0x5, 0x5}, 0x1, 0x100000000, 0xd6b, {0x561, 0x3}, 0x8, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x106) sendto$unix(r1, &(0x7f0000000040)="681549ed24b49abbf7ae496c704770f3c7175f51d8d3dcb95c181562f7c587afd2c7f568abddd0376b358d23effc0e74f23046a1567844355b3c4841a7d10b8f1242f59a1829cae941baa09d8bb0c2536ef51dbd52c7ffa63b5ff325cd7f11499cb1434e86ba8187d33a87458c9d574566d2b255f5d508752b641049ec7312750d3db2c3cc8a141980371b1110d7136baab29eacf49483ce56e08c365117ab596640add60d917d198fd143b34026ff27ab26db178367bf32b83dbdf00728309cff5dc748337b350edced0313e2022537c0c7", 0xd2, 0x20000010, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mknod(&(0x7f0000000340)='./file0\x00', 0x88, 0x6) 19:54:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000000, 0x4285}, &(0x7f0000000180)={0x0, 0x0, 0xaa6, 0x5}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240), 0x8}) 19:54:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x10f, 0x0, &(0x7f0000000180)="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"}) poll(&(0x7f0000000080)=[{r0, 0x4003}], 0x1e4, 0x1) fcntl$setpipe(r1, 0x407, 0x7) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) 19:54:19 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='io.stat\x00', 0x0, 0x0) connect(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0xfffffffffffffe0f, 0x0, &(0x7f0000000040)="a3ba8b7c9d06d6f9cab9c2c21033f6f6d9802596ae5b976f3ee73e2f0dc86c2a9d4fd1cca7bd5597f55df0c332d5407a0810db6127edd32c8a31ff9cfd7aaaafd691e6f712ef84f95c44e2ceb9286bf993841de48e938dfa3f1f588661045b181f1227ba097f24838463d5cb3973b12076822b603e73658baf8378d87e45a8c3b2669b7b1b3e0c2cb18c6cf1617095a2d5b74b924c46b07b5dd01c3b92f0dcdec18a05935ce2e7fd"}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000140)) 19:54:19 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 19:54:19 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x7) [ 472.059693] binder: 8092:8093 unknown command 13 [ 472.064547] binder: 8092:8093 ioctl c0306201 20000780 returned -22 [ 472.072684] binder: 8092:8095 unknown command 13 [ 472.077486] binder: 8092:8095 ioctl c0306201 20000780 returned -22 19:54:19 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x1f, 0x1f, 0x5, 0x7ff, "2ea36f7ef7987a1a69e8365c2af55d7df247c00bba46322c4711d1dde6715be1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, &(0x7f0000000040)}) epoll_wait(r1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x3) 19:54:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x0, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)={0x632, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x0, 0x6, [{{0x2, 0x4e23}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @multicast1}}]}, 0x390) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) 19:54:20 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x3d2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x140, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000300)='./file0\x00', 0x2, 0x10) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x80, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize'}}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d630014"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x0, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x25, 0x1000, 0x5b}, 0x2c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) 19:54:20 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) [ 472.869693] binder: 8155:8156 unknown command 335569677 [ 472.876280] binder: 8155:8156 ioctl c0306201 20000780 returned -22 [ 472.884012] binder: 8155:8159 unknown command 335569677 [ 472.889837] binder: 8155:8159 ioctl c0306201 20000780 returned -22 19:54:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x7ff, 0x7, 0x401, 0x7, 0x0, 0xffffffffffffff80, 0x10000, 0x8, 0x0, 0xfd38, 0x20, 0x0, 0x0, 0x401, 0x8001, 0xfffffffffffffffa, 0x0, 0x40, 0x7, 0x9, 0x7, 0x2, 0x1df, 0xd71, 0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0xfffffffffffff9c5, 0x8879, 0x9, 0xfffffffffffffffa, 0x4, 0x1ff, 0x40, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x8, 0x3, 0x6, 0xdb, 0x100000001, 0x100000000}, r2, 0xe, r0, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:20 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getegid() r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x4d3, 0xffffffffffffffff}, {0x3, 0x6}, 0x2, 0x1, 0x7fff}) 19:54:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03520840c6a6a1fee79e265962775efbaaf70b15b63943405e65eb3f8f5f40ba9121a85055b4637fe0a06b59f0f112f2258ab1", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$getown(r0, 0x9) sched_getaffinity(r1, 0x8, &(0x7f0000000080)) 19:54:20 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x6, 0x100000001}) 19:54:20 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x90000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='btrfs.cGroUp.procs\x00'], &(0x7f00000012c0)=""/166, 0xa6) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000001380)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80000, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:20 executing program 0: socketpair(0x5, 0x6, 0x1000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x10001) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x151, r1, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x4f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="04000000"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x0, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)={0x632, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x0, 0x6, [{{0x2, 0x4e23}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @multicast1}}]}, 0x390) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) 19:54:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x6, 0x0, &(0x7f0000000080)="5ce410dd14c1d836b59a122dae9068f2041550481ebaa0fcb300b9ba1c"}) 19:54:20 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:20 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) socketpair$inet(0x2, 0x80f, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000280), &(0x7f0000000100)=0xc) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@empty, 0x0}, &(0x7f0000000200)=0x14) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x2) mq_notify(r4, &(0x7f0000000400)={0x0, 0x3, 0x7, @thr={&(0x7f00000002c0), &(0x7f0000000300)="69d2665db6cef781d385d916aff94c1b050c676e371cd8c8dced7682291425ccdfe7fc67eb09bc42845cbfafb12a5a223377716ad4e3dcdb3a3707c766dbf34d2babc820b38d40c8a40a8834416165a7bd6afe7efa9c768822d43283cd2d1893fcb6ea7a66cce8a3f8e5f37f4e6cf0992d0b0d895acc314eea245e1f6e3693fa83577528632f645f9383385f3824962aedbcd72614b9fff315e562fba86e58bc13b7486a0d3c617c9f2ad3baf0e24a39979dfc690f200cf8fe2f398c3812299258265d954080e5f3fc4579bb330900c923f398b397a8a5e13479ac6ec11e"}}) connect(r0, &(0x7f0000000440)=@hci={0x1f, r3}, 0x80) 19:54:20 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) statfs(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000400)=""/4096) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='hfsplus\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) quotactl(0x8000, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000001400)="bb7740ee1222514d724df9b98e31595e7e654186d2cac352ec70d4ed7a5eba62c6271c7f70c82784c69959140fe8b10664777ede1a1def38d419c69374df4cb1cb14dc49ac863cd202535333e325e2167c5a842c8ac1b305e42eb74156b0f3ab22d54f05c0f81518c2f5014380b8c3b686bf480a76b4dfff9e49b4a64f3f2c9ffaa00dea2c80322e04b7ef906599d05f26ed913dd3c0882110d58016016ac6cd41b44d4abfdb8e9394b8ee2a8ed2f29c6477c134c7054d91fada906d6dbfe575863cfd307e77b54b8de2") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x41, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xee) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:20 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = getpid() tkill(r1, 0x38) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) [ 473.020733] binder: 8194:8196 unknown command 4 [ 473.025573] binder: 8194:8196 ioctl c0306201 20000780 returned -22 [ 473.054702] binder: 8194:8196 unknown command 4 [ 473.060134] binder: 8194:8196 ioctl c0306201 20000780 returned -22 19:54:21 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0xa411) 19:54:21 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:21 executing program 5: capset(&(0x7f0000000040)={0x19980b30}, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x80000003, 0x1}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_adjtime(0x7, &(0x7f0000000080)={0x2, 0x10001, 0x0, 0x0, 0x401, 0x7, 0x1ff, 0x8, 0x7fff, 0x7, 0x80000000, 0x10001, 0x4, 0x6, 0x1, 0x5b0c, 0x8, 0x11e4, 0x7ff, 0xe00000000000000, 0x1, 0x0, 0x6, 0xfffffffffffffff7, 0x200, 0x100000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:21 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) lseek(r0, 0x36, 0x7) prctl$setendian(0x14, 0x2) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:21 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) listen(r0, 0xff) 19:54:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x721460e89a713fce, 0x0, &(0x7f0000000640), 0x8b, 0x0, &(0x7f0000000800)}) 19:54:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x0, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)={0x632, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x0, 0x6, [{{0x2, 0x4e23}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @multicast1}}]}, 0x390) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) 19:54:21 executing program 5: socketpair(0x19, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffc}) 19:54:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80100, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f00000004c0)=@xdp, 0x80, &(0x7f0000001940)=[{&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/123, 0x7b}, {&(0x7f0000000700)=""/223, 0xdf}, {&(0x7f0000000800)=""/54, 0x36}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/252, 0xfc}], 0x7, &(0x7f00000019c0)=""/232, 0xe8, 0x3}, 0x80000000}, {{&(0x7f0000001ac0)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/153, 0x99}], 0x2, &(0x7f0000001c80)=""/100, 0x64, 0x95}, 0x40}, {{&(0x7f0000001d00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003200)=[{&(0x7f0000001d80)=""/185, 0xb9}, {&(0x7f0000001e40)=""/131, 0x83}, {&(0x7f0000001f00)=""/14, 0xe}, {&(0x7f0000001f40)=""/144, 0x90}, {&(0x7f0000002000)=""/215, 0xd7}, {&(0x7f0000002100)=""/113, 0x71}, {&(0x7f0000002180)=""/84, 0x54}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x8, 0x0, 0x0, 0xfffffffffffffff9}, 0xfffffffffffffffb}, {{&(0x7f0000003280)=@can, 0x80, &(0x7f0000003740)=[{&(0x7f0000003300)=""/72, 0x48}, {&(0x7f0000003380)=""/198, 0xc6}, {&(0x7f0000003480)=""/49, 0x31}, {&(0x7f00000034c0)=""/190, 0xbe}, {&(0x7f0000003580)=""/44, 0x2c}, {&(0x7f00000035c0)=""/36, 0x24}, {&(0x7f0000003600)=""/10, 0xa}, {&(0x7f0000003640)=""/1, 0x1}, {&(0x7f0000003680)=""/153, 0x99}], 0x9, 0x0, 0x0, 0x7}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003800)=""/47, 0x2f}, {&(0x7f0000003840)=""/74, 0x4a}, {&(0x7f00000038c0)=""/19, 0x13}], 0x3, &(0x7f0000003940)=""/34, 0x22, 0xfff}, 0x7}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003980)=""/248, 0xf8}, {&(0x7f0000003a80)=""/94, 0x5e}], 0x2, &(0x7f0000003b40)=""/73, 0x49, 0x52}, 0xfffffffffffffff8}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003bc0)}], 0x1, 0x0, 0x0, 0x4}, 0x6}], 0x7, 0x40, &(0x7f0000003e00)={0x77359400}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000003fc0)={@ipv4={[], [], @dev}, 0x0}, &(0x7f0000004000)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004040)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000004140)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000041c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000005d00)=[{{&(0x7f0000004200)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004280)=""/120, 0x78}, {&(0x7f0000004300)=""/223, 0xdf}, {&(0x7f0000004400)=""/97, 0x61}], 0x3, &(0x7f00000044c0)=""/4096, 0x1000, 0x2}, 0x7}, {{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f00000054c0)=""/202, 0xca}, {&(0x7f00000055c0)=""/140, 0x8c}, {&(0x7f0000005680)=""/102, 0x66}, {&(0x7f0000005700)=""/157, 0x9d}, {&(0x7f00000057c0)=""/104, 0x68}, {&(0x7f0000005840)=""/224, 0xe0}, {&(0x7f0000005940)=""/213, 0xd5}, {&(0x7f0000005a40)=""/53, 0x35}, {&(0x7f0000005a80)=""/129, 0x81}, {&(0x7f0000005b40)=""/39, 0x27}], 0xa, &(0x7f0000005c40)=""/144, 0x90, 0x8000}, 0x1}], 0x2, 0x2, &(0x7f0000005d80)={0x77359400}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005e80)={0x0, @remote, @multicast2}, &(0x7f0000005ec0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005f00)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000006000)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006200)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000006300)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006340)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000006440)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006480)={0x0, @empty, @loopback}, &(0x7f00000064c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006500)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000006600)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000006700)={@dev, @loopback, 0x0}, &(0x7f0000006740)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000067c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006800)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000006bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006c00)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006c80)=0x14, 0x80800) recvmmsg(0xffffffffffffffff, &(0x7f0000008500)=[{{&(0x7f0000006cc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000006d40), 0x0, &(0x7f0000006d80)=""/253, 0xfd, 0xbe}, 0x40}, {{&(0x7f0000006e80)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000008400)=[{&(0x7f0000006f00)=""/190, 0xbe}, {&(0x7f0000006fc0)=""/213, 0xd5}, {&(0x7f00000070c0)=""/58, 0x3a}, {&(0x7f0000007100)=""/210, 0xd2}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/236, 0xec}, {&(0x7f0000008300)=""/49, 0x31}, {&(0x7f0000008340)=""/86, 0x56}, {&(0x7f00000083c0)=""/36, 0x24}], 0x9, &(0x7f00000084c0)=""/52, 0x34, 0xfffffffffffffffe}, 0x5}], 0x2, 0x40000102, &(0x7f0000008580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000086c0)=0x254) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008700)={0x0, @multicast2, @local}, &(0x7f0000008740)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000008840)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000008940)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008980)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000008a80)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000008ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000008b40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008b80)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000008bc0)={@loopback, @local, 0x0}, &(0x7f0000008c00)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000008c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000008c80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000009780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000009740)={&(0x7f0000008cc0)={0xa54, r2, 0x20, 0x70bd25, 0x4, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x208, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7, 0x10001, 0x6, 0x8}, {0x4, 0x5, 0x0, 0x7}, {0x7, 0x100, 0x6, 0x7fffffff}, {0x3, 0x4, 0x5, 0x7ff}, {0xe9, 0xd3, 0x7, 0x8}, {0xffffffffffff2bd0, 0x0, 0x9, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x160, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xec0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x17c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r18}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xffffffffffffd76c, 0x10001, 0xffffffffffffff1f, 0xff}, {0x0, 0x17a1, 0xd7a8, 0x1000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r20}, {0xf0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x2, 0x800, 0x800, 0x2}, {0x5f, 0x80, 0xd85, 0x101}, {0x4, 0x0, 0xbeb, 0x7}, {0xfffffffffffffc00, 0x9, 0x101, 0x2a7e}, {0x5, 0x292, 0xeaac, 0xfffffffffffffff9}, {0x8ebc, 0x3, 0x800, 0x9}, {0x100, 0x5, 0x5, 0xe17}, {0x1000, 0x401, 0x2, 0x9}]}}}]}}, {{0x8, 0x1, r22}, {0x270, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xcf3}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r26}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r27}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x2, 0x7, 0xffffffff, 0x4}, {0x3, 0x8000, 0xb5, 0x80}, {0x1, 0x40, 0x622, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3d80000}}, {0x8}}}]}}, {{0x8, 0x1, r28}, {0xb8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0xa54}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) 19:54:21 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="f10c90be748c5a0d07a80f6490db1e80a6b669081d6ece90e787d5f0d81755575adcd6550423772ca5b3b1164fb745be5e", 0x31, 0xfffffffffffffffb) keyctl$clear(0x7, r0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0xfffffffffffffef4) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'system.', 'em0keyringcpuseteth0\x00'}, &(0x7f00000012c0)="2d656d31ec76626f786e6574316367726f7570407070703000", 0x19, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8948, &(0x7f0000001340)={'vcan0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x2, 0x3}}) 19:54:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x18) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') symlink(&(0x7f0000000200)='./file0//ile0\x00', &(0x7f0000000180)='./file0\x00') 19:54:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:21 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x7fff, 0x80000001, 0x60, 0x9, 0x4, 0x9, 0x1}, 0x1c) 19:54:21 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) socketpair$inet(0x2, 0x80e, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x15}, @remote, @local}, 0xc) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000004480)=""/4096, 0xfffffffffffffff3) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x0, 0xfffffffffffffffd, 0x1000, 0xffffffffffffa11d, @scatter={0x6, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/121, 0x79}]}, &(0x7f0000002480)="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", &(0x7f00000006c0)=""/48, 0x4, 0x10002, 0xffffffffffffffff, &(0x7f0000000700)}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) renameat2(r1, &(0x7f00000007c0)='./file0\x00', r2, &(0x7f0000000800)='./file0\x00', 0x4) 19:54:21 executing program 5: capset(&(0x7f0000000100)={0x19980330}, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x4}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept$inet6(r0, 0x0, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000180)) 19:54:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) [ 473.826097] binder: 8264:8265 unknown command 0 [ 473.856756] binder: 8264:8265 ioctl c0306201 20000040 returned -22 [ 473.871301] binder: 8264:8265 unknown command 0 [ 473.876920] binder: 8264:8265 ioctl c0306201 20000040 returned -22 19:54:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:22 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') r3 = open(&(0x7f00000002c0)='./file0\x00', 0x101000, 0x44) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@ipv4={[], [], @rand_addr=0x7}, 0x1, 0x3, 0x0, 0x2, 0x1, 0xee, 0x4}, &(0x7f0000000340)=0x20) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r2) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) restart_syscall() ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x7, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21}, {0x2, 0x4e20}, 0x80, 0xdbbc, 0xdf, 0x5, 0x6, &(0x7f0000000000)='syzkaller1\x00', 0x0, 0x5}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)="e5ce0e9cf6c94064f998e25d84863950f921007bf920401fb5d54c230e6dc3e113cf460061609c5547fc416b3b7d00b9e92fdaad7324697c6c52f3b7d43e5a59") 19:54:22 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:22 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000240)={'mangle\x00', 0xbb, "3f11ead39b5d3fa43bfb73e24be207897c13483c3896f5f23f7b341273f84a25d9429d28a16780ac3173991a9d9ef0477328b521ccc45587bcefafe91be66e57c030f6763b42b4cf240d1cdc830cfd9885aad938b58aa20b118a14941bd09b871d449d0b3e34f700c3d67c1f98558db3d11502513a4e55d04d4352ccd0e83b677bbad0e45abee4d061690000180c6c5486cac2f16585c1a2492a64525a44cacd4149763dc39cc6e9d2e53fec01a8269940325c4a03cb2058532300"}, &(0x7f0000000140)=0xdf) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 19:54:22 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fstat(r0, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000)) rt_sigaction(0x7, &(0x7f0000000040)={0x42a535, {0xfffffffffffffffc}}, &(0x7f0000c69000), 0x8, &(0x7f0000893000)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="6e65e026cdc17000") r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x180, 0x154) write$binfmt_aout(r3, &(0x7f00000001c0)={{0x1cf, 0x2, 0x101, 0x20f, 0x2ba, 0x5, 0x17c, 0xffffffffffff8001}, "907ebc6f26a8a771fc86539d0c5efcc17da3af053e08aff2123ed1a142b451961f38c4e3cb689b5120f815695c3084f2d4092ba356c9117e", [[], [], [], [], [], []]}, 0x658) 19:54:22 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x101) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000280)) mount(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='sysfs\x00', 0x0, &(0x7f00000002c0)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/186, 0xba) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0240d53749eea1b76486e6d8961befb1da60674b9af2563ee9446eac6e4528987f946dbfbbe9effa8f69e01fe0919f5dcb2e8a5b10b8eb930b9998a228ca3a42bed1a5b771232b886caa0681407767"], 0x0, 0x0, &(0x7f0000000800)}) 19:54:22 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x0, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)={0x632, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x0, 0x6, [{{0x2, 0x4e23}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @multicast1}}]}, 0x390) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) 19:54:22 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) setrlimit(0x200000, &(0x7f0000000100)={0x100000001, 0x100000001}) 19:54:22 executing program 4: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x2, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:22 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = memfd_create(&(0x7f0000000000)='*-cgroupcpuset\x00', 0x2) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x10) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x64da}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer], 0x45, 0x0, &(0x7f0000000040)="8b5bd5b5f4cab9a390d3a3c3e285dd7a72bf5200f7bcc606b685edd9829354a980c57644d8692471b0c9ae81012139363e04755605b002e1c7903395ada87ed5f541d9413f"}) 19:54:22 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000240)={0x2, 0x0, 0x20, 0x4, 0x0, 0x5b}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x42, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000001c0)=0x2) times(&(0x7f0000000140)) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)=0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:22 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) exit(0x3) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x45) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240), 0x4) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) [ 474.699850] binder: 8326:8338 unknown command 936722434 [ 474.708212] binder: 8326:8338 ioctl c0306201 20000780 returned -22 [ 474.716343] binder: 8326:8338 unknown command 936722434 [ 474.722615] binder: 8326:8338 ioctl c0306201 20000780 returned -22 19:54:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:22 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000004}) 19:54:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="4d168af5334647fcb433eb6fe7245aced69193ece07cda16cf6560076c0e0a6b1a3c5e1eac8873cd9df4289835bb46511f8ea891", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) r1 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x50, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000014c0)={0x6c, 0x0, &(0x7f00000013c0)=[@clear_death={0x400c630f, 0x3, 0x1}, @free_buffer={0x40086303, r1}, @exit_looper, @reply={0x40406301, {0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000001340), &(0x7f0000001380)=[0x48, 0x78, 0x38, 0x18]}}, @register_looper, @exit_looper], 0x7c, 0x0, &(0x7f0000001440)="83b9e368374d1d81061345f386e1cee909374217e3843d4597bb6b367d22418de981c28c1e267f3c644376724c641e7a7889a2f83e99bb89a0e417fb64078f0972472c594a32aad75ce0d6aaa0c08166d51077fd5f60e1749b51ca80037a92b0a8cac7b4b9441c70536d1c3191504b37c97a45a5bd0cf04da629af66"}) r2 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000240)={0x0, r2}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x8000) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000012c0)=""/35) ioctl(r0, 0x1, &(0x7f0000000280)="e9dd92eed37fca2514a23fa65340084012256fd3f9a5b8161bdbed08d3316a8faeb7f1c1527c91ab9c5fa7c42064529d563a809462bd68fd53fdfc7b2d9e5ab1e16e601158b0fece1744fcdcce2d5063f146640a1ef7508b2086030deb2a5c1c5e220b207bb02f1cfb276a3546040aa71d539c6ad17e47c10b997acc6b9e8c25b9a2d7b6019240cd191fec1d13b7e13696472d3852f2c12460004d0544d9729ffd7a88b1bee1303a7d01800ff397e2b7965536ef2bde8e8a42acd768fd860e5623a8ea176a99856dc3921c90ab32b4c5b6975ec44be499a7ceb1bb89a2b0abf455a715d730215121477f50b68556cdaabf471da2059fd4cb8113ea096c51a80f7a0fb1d13cc1bc5c70c41b2f9cb8ccda1927fa2035bf77fcb206bbab9ee743758b8c649dadd00abbe7c717f6cab0637a6cc632112036d3c567823bacb7b53f30dcfc788c447353a18dd2b96ca2d645ccad67c2fd1eb7adbf4cbbf3021ad6dc43762f18064cd349e6ab594ae7d853c6ae3c5738747cab3521f005520e8b10168895ee1e122b8cf8ebe5d50af043ac7de17138bce1e07bd414ec48af9adaea8b4b248a63619bc2711120f6763c3a27ffc644c206e38774d6fbf4209253b2b77a679411c7f6422bd64b5048625c55d608a2abcd29af8eae72ee923443e63e2c34d5feedd56239a1e94aa9b0794bbc375d53722a9c56b17160260bdd692116359080f3965bec22a29019bf85638be6004617a7dbd973cd7618bd160f509307bd347c860f3f2a0086c4854122a7c84c352bad8000b1ab026b0907fe93453663ee9e45f6897c68315ef1b20f5170cb92d59604ba31ce40ff4d589604dfde06cf5dc72fa93f56967de9dcc1618b6146432316ee68e50311ab05ea64c299611e1943e274652e188bf10e57d28198c97373dead6cc3168280cf948a4ce8e150378f9e5d5f50d14a1491df49ec58e8247dc72b4e7c9289958259eb4e92972403626797445ee84fe38194b691d2225e55d858bc5f97ba317b997489ede1e4cb15cefbe1fcc24582832a42ce7c8b0e7e52569d2062ca1d2c252755fbc64a4bf7b5be242ed75bcdfadc5b38e2acdd288bec5cb9f8ec27d5298587cab12cd2c696ed6012f55669c091f3440c53e3dc5032a0fbc5bb82eb14e5d48b0f9a2d9237fcab4978f729805496d8e2cc538c51874e49ca8c31995d8d142c8207062a73c6f95add1d3be411136c030b02bbaac95b200f7bbe9c38e157a4608b55f5e58fc81d37002d8698a27acd83b1e2b6c0d22bd98f2cce7cbe4f3b984039c2c4d3bf54bc448128b20e89693ba3c7f42335181fa24ef30ed56a0bc612cf69cb3e9f95a74ceb3f53a36ec4acaa8fe155a2d2faebe20cdcb52d4680b521c45f2dc9d881d7756de1e96e45f586d944a7266d75d2b6eebb597b79c36dfb016464a516e368d3bd192c40286c8754808ec0eac60ce740c234f0e524f41b1ed4de64cf0edea0febade9f14346081389d20c8b2a0fc7d1b29f342371b970136e94181f37e4275109318de28f99181d8e9470d2cf8e4d742b0476881d64a9cabf1ec89542d79972ef0705fff1cb18cf4e9004e259720e9f82a8440dd63538bededdfd0811b78c0d8abb31639f318bff196cf6012197b26b16fe58335593319a22c78851cecbdbf65710ff31a6dc2b4d9b8007198b377e310c587d756bfb7c9bb377ba2144cba3af7fea81e50d605144a1da84c52a800012109922e626992d7aaafbc3be7400794934d00252098a2acaeceacb56d859b591aa1e8e1bf96db080b0959133cb0ba5db407264bf7d9d8133e4616f543ef033b51f83ae0588ea5fe10e902e7ac3959a30c44249b882983dd6b0156721a60e000ff5392365b73cc1ab3b43794529f82e14831f7ee2433dddd84ba1383506f0a51f462e9b6ff8bc3afadfe119c08f3432fcff76e6c9758311897884d246c000aa1231b4d2a58ec4386b57a70cb00516ae67fe58a973534cd131de031ec2465f7c8f278a678d2bbdf2ca4c521defb40abb2235db95e7b5eda88af7b0e45d8a93d440eae3b9c24b3ca4fc8053a0878c2263ddc6aa2a4123bd0ca35be437e5ebe15155a067a67ba89b75cb9aba8fd423837c91e5809c0b4fa0c0ca42d619ef1a812336e2279cfa2dee7dd44ef086e7a4144f0155e221193ce204443aed04e3772c8d90002fa342062e49f250dafe134e284ab883c378e84c65351a8a0cb588a7e3344861820d9c9ceaa39fe3060843bf2e2b7766d357ba5a16852f4f75c5d02c77238d0048a7367e7a0d9dfe81fb89a33d7dd0e0d8f29de6b12182f3bbefc6214db83f103e854918b744fec75ec1c334aa1095c02ba615fb86e7b24d542226cfdcf850f7228c2b2cd3604fc5f62246b66db085b0a57cf72643cb816ebd34ed7df17ee636bc53b35c5fb85799c05627252416c357e0e3bb9d640bf38c9545fa098ac1f6861aa800765c7bdb7158fc49ad67eedc00d1cb35ad349a9f3880cba17bd5fe93803dc3e19e714ae381db27e8bae6778a47e16943c6492c1954460a022f12455b69c3678d04a98db7cbf51e59af1acbfd8a9204b0a25772fbcce5a028a35e4a6b41b6a99f7169efe0165dbb2989112c692863e41726b7b5907abe5ce0ad74bfc585f4ef41280a9745b4d0b980ebd242640f74f824c40fbdf1ff5de62a79e6f29d649eee7b88369230232236a35bbb8e7c8159f707e1469e05043e8067d144aa05cee3816d52bd321305b6a94c2eedf18b707614cf590abbbbe0fe3b29475b7d06b45c0565a3613eab62887db421a0fe7e6d1d75c9466dd930ec6c171637df4648782a96728fc5cf539a89454b10a7e2b04f2f8e0b5d579e59ee902b32a919f71666786ee6e3a00ed6f146707fac3708247f262579df470c42a47628b27c8f37526e01a3b4807b45bc6cf4cd863492f01bf584148b3a115cd9abf3eafa3af0606c55210dad5c28130db64cc9d3ac2fe02febedb1f940323422b6204cc5aabc481e90b55e01f5a48bf48101a60104fc8615b7b70e2c332c5ed232c9c420bd79625283b2b6fe431df21ecced712452c49f7650dd872ae0cd512c4cd8aade969003e00e9ef683f284e6810b1c724f960cbc10e926adeb73e7ec7198cb86d5b3527b01d417ac93495698aa3dec87ee66b53c6ddfa6e9fc26d4f43267525eaf01d9e00eace2669e808b6ca08fae3f4bb0486506641e4081f967880cb7bcb005280908e9e2cb5aaaeebd97544010e6d1a059afb7cbe36f852abf217d942633ee612b1d3ed0c2e971c9879e9602faad5de683428f3351cd31188c6ec241b2eec710f6897626ad949ae7a5fcde32a83d886229dc714e2056bae1e6b74b9e71fe35b99ab3706dbfdf506a8b25c60dee08f7bc12369ffff9f9244b21bde04a9b03d5234a47efe91f3412d5b0e41ac74113634b7976ece498636955b619bef47d061482ad2fd13d0a6d0894c0ad677a080233ffc2f92c53e2a61d4ba825613f680d1fc455d24205c877c5f60b2da152424c62a805b67a76cc3c709307588808141701c56942910cce227232b91517549e05ba6a90566168a3fa47d51e9070ef101610906a5e33f9f57ba34f3b7a8db36108eef31994795ff79aa3b59a6988528b4a2e3d2d505403c14902f6695a83f611ea558f5fa98a5c569c2fefa2c87b022a00d53d2cdbcab9d9c44d06e7dff95b970e0f7ef3b6d8a5b4b8e1e275ffdb7e5dead6a2594042f9ad174a5ae0cdb8920ee1aa6cb1cf32968329ae9766ddca3c36908586f374a49193ae799f80ee2ad50821486813563d73fdaa7e24229a800ea23b5e63bbe5dc1de235cf9168c3c00bbe40b23462cd1bceeef3bd4ac8f36397b6ddbce047d189e1b1e49bb1d79ca662e569020c4a6b8a0903e4aaf244dd506b1672f9ec1a684a2d3dca8f9e85162565794869d654dfa37e83f9133f83e551f00f7c9c4a6e8055006f37ecdcbbaf9b9d515fac1d4c7b375a97e0ef8b2bbd03594a46cc316e2b68910c9ae40a4e44a764ea79a0e3798b300afdcd6fd7ea9bb1e654c0fc3f6f6e466cb2e51cab4c5358294175b12da2334fe90a6bcda49ee497b61b9c260877ed9993f05f97af79ca4fec553f8b3042110c26593241f98c5e61ded5fd52d589f09ff58ff4f336360ce0c4d9848718c972b8066ed4c6f60e532fddc3df323ef1998ceb189882241100cd384c3a9d88402d33fc64ad27a658b46231f9f40a5cf7d32acb9e4f6e48608ef14190be89df26d7c183dad62fcd7fb7d73176ba8c5c443a44993d16ba5be66fa4a18e89be7353074cd290971045a8440a927b9dcb0706360cadeb8c8de3ecfb6f59f2436c5f339ad437a68c7384f21cef039a711401ff9e810fc26dd6faa8cd1f5595bceed1f7d89234dd8d2deb52c64ccb7bec3f0a361a97fe3d6ff028ecf1e04fec0f2b8c85d0d6fa670aba3b4bcd32683f62061b7bd62d4554adab092f2ca808cefa9f4facf13d913ea4053219022cdb26736ca890a624dd7f6c28ab44105473c92b7ca27f045ce691afe4a5feb11f0ac5bec1b3e4943c81caabebaed607aec6dbc34e35e5ca4f3193fa7af823fc7f2b1322dcf6c88326d103af08087401566123a460bc1c3a79bdf53ce6d5163acb27e216357d43db7965325475b0ab9a8cef52bf22afb281ae3233bb4aecf6667e56ecdcfd6a692f153f1850388909684fc8e33dd22dd41204fb9198c756d740832637bf33a430cd7c961c424e4b21988fc46c9c8d6e6d799784e47d602bd8093835c89f99093a3205cfff5d1ba2f1783bc603e5b293e9d9891bf740af841e4ee1ffcc88499a1cdad1362243d775dad75a93c7eb8f5296b330c5264428c6b63275f24f8b3bfd6b05824a2c12ae5376b0670744d756e633c0b1129adf440336f5f6a934b55aec10c5711fcbae4b20f946ea608076dc63e7347d46ed98507a937dcdca6301dbc6138f6e3f913ba9f4c273e8c45a9e532f17c4b9800355a88466d5d02c6e7679eabcac2ff9b2e8731ce206ffa4bc692f0efffbd1d839f95a7403db7850ce84fe14393f6cb6dac5df5bfdb3aeba818a653d979d1b89ec3006814d6baa49cced8ada010eed933affd137d5d88223d4c18e5a8bf241576c4c0fbdf308d9f68ef8f8d198a212d4abaed9468b8cbab6bf7712ec008704a6671f92c3e70c1aa753defcb8d9f67764a875248c7f8da8e44328e77d24f10277b2a5d8c992b9eae504dbed7ef117b303330d4ed193d5881baf3e6d23d60d3a5fc74a0e0119b37bd2e383e18cf0cbceee829b0831052745d2a86041e0bce7bfd82a85e986ee3baf19c28692584a1479d1e498917f973b768cc4f25178c751109ce3a66db2f6ef4f1f47c746f3d53ca228ec3bf0ec94bb499947db28e8ff1982c199978e61ddf101c5537e1d13933c7d9c742598307bb29244240ccae3ee787100b145be03486ceeb1dd6e712dc0be7e2f38e4387a8293dccdee2da997047accd2d021d4f772a0f0743a1a4ed225f56773abd20cab588fe83cb5a1a8ab5346e4569fe69bcfbcf9d39793ace18c1b15b62d06afa8ac3c36d50de5360cc0dadee2190d6fdc0bcd02a3d0a376dd183aa1872ec9f0e0fa62228e5781924a5ae898aca780932916eadc0b40bb48379765dbdd39acd2fd0f7945798fb8a617cb6679d7c63f222f268ff727025af1fa5ebb8e2de21bf20bc46e38cf670551d9290b8ae9a0261d5f47a21d3dc617f0efcc8e499b4cbf81f9d4636df683e6aead7ab4865f3d08303f27e28b648e5ea2b739be60295e6fe4c887b8b861823c3fd2045800736b24c4902bae397") preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/69, 0x45}, {&(0x7f0000000140)=""/160, 0xa0}], 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001300)='/selinux/enforce\x00', 0x4140, 0x0) 19:54:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffdd9, 0x0, &(0x7f0000000080)=[@enter_looper], 0x9, 0x0, &(0x7f0000000000)="f15c96df1e7dedf713d06ec1396b2c5c5c2d297858d3a94f7059ec0f023cb0ec51edc2bd7f9935b180a4b8184ce0"}) 19:54:23 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000380)="54dae1df5c05a171558fe01a1928924a60c5d2cfa9a637ac4cdbd27b28c3f703691859a7cc20884dca5d47dbc7dfc0f9c94d7d05c4a74e8904394aa0f73123ad19dea0fa25e45d8c3136069bd7037c4154fe0e6b492373276b6f37842b62354d010900000000000000b9d66703a0f2886fcb45390000000000000000000000000000", 0x82}], 0x1) sendto$inet(r0, &(0x7f00005c8000)="c3", 0x1, 0x81, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) writev(r0, &(0x7f0000001940)=[{&(0x7f00000019c0)="1e", 0x1}], 0x1) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/238, 0xee}], 0x1) 19:54:23 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x8) 19:54:23 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x200000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:23 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200001, 0x0) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x7, 0x6, 0x1000}) 19:54:23 executing program 7: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080), 0x0, 0x0) 19:54:23 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) membarrier(0x0, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) write$selinux_context(r1, &(0x7f00000000c0)='system_u:object_r:getty_etc_t:s0\x00', 0x21) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000000000000}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:23 executing program 5: set_tid_address(&(0x7f0000000040)) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xb6d}) setrlimit(0xe, &(0x7f0000000000)={0x100, 0x400fffffffb}) 19:54:23 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) 19:54:23 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ipx={0x4, 0x9, 0x8, "0bd7e8bdd971", 0x10000}, 0xffffffffffffffaf) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f00000012c0)="fe6bf60fe2151a4a8f163dbeced57d46f94de008771608719f9fc3e4ca0c7255dad37ff594b79e02383b40033250f05ea69b8439bc1700d738a7705b5d870279e6029d3d93edc5f7761b475d1880a03f53c1c22c673d02e24a405b29dc773bd3c0f70c0f60f7e8a9f9e16a64d23cb1dbf6d55fd7aa8a4819c381ac41c554cf1beb3cc9891d01172cc6750d9f693dd98bff38594204ca76b1d68b2ff62caf99635c7df67fe4a0654487504474497a67ef28b7bd9a52cbb6e22c6c8c29de67d487f3312b4be952623a5950a24f92ae3e9270a7c536d40295") r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 19:54:23 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:23 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) 19:54:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syncfs(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:23 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0xfffffffffffffed5, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0x3e5}], 0x100000000000005b) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000140)={'sit0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x401, 0x1, 0x4, 0x7ff}, 'syz0\x00', 0x19}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0xd3, 0x2, 0x9, 0x0, 0x200, 0x4, 0x8, 0x7, 0x2, 0x7, 0x0, 0x7fffffff, 0x4, 0xb92b, 0x6, 0x100000000, 0x5f6, 0x6, 0x4, 0x0, 0x7fff, 0x176, 0x9, 0x4, 0x2, 0x10001, 0x10001, 0x7, 0x9, 0x3, 0x8, 0x9, 0x2, 0x80, 0x57c678ac, 0x0, 0x8, 0x4, @perf_config_ext={0x10001, 0x2d12}, 0x20000, 0x1f, 0x7f, 0x0, 0xffffffff, 0x0, 0x7}, r3, 0xa, r0, 0x0) 19:54:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x50df0053b3cde8ea) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x218, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0]}) fchdir(r0) modify_ldt$write(0x1, &(0x7f0000000100)={0x480000000000002, 0x20001000, 0x4000, 0x5, 0x58230bf6, 0x6, 0x4, 0x2, 0x1, 0x4}, 0x10) 19:54:23 executing program 5: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:23 executing program 4: mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:23 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file1\x00', 0x40, 0xfd) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:23 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="15", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 19:54:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$void(r0, 0x5450) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:23 executing program 4: mkdir(&(0x7f0000000280)='./file0//ile0\x00', 0x40) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40100, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.stat\x00', 0x0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x6}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x3}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f0000000080), 0x8) umount2(&(0x7f00000000c0)='./file0//ile0\x00', 0x9) 19:54:23 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0), 0x4) 19:54:23 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940)='/dev/autofs\x00', 0x141000, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000001980)="35e8959a4608278dd0", 0x9) r2 = dup(r0) r3 = geteuid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000018}, 0xc, &(0x7f00000001c0)={&(0x7f00000012c0)=@ipv6_delroute={0xf4, 0x19, 0x3, 0x70bd27, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x9, 0xfd, 0x2, 0x0, 0x3, 0x400}, [@RTA_METRICS={0x88, 0x8, "52229bd4419d69ebd81b13520c0c242244e030d99b4637b73605f957e1a2104aa72bd4e945b512d83d178191cc12d77bf0c18638f174da6832ed1aed63c4a372d08473c8a41f74245237562ba07fc4792584cf4214993130515577dd5a672f1e975d7c6f8850f9696a2e91d65b1f0857e97ea145091dc5bd65079ba5b0ab9a92d6b8cc"}, @RTA_UID={0x8, 0x19, r3}, @RTA_UID={0x8, 0x19, r4}, @RTA_ENCAP={0x8, 0x16, @typed={0x4, 0x2c}}, @RTA_MARK={0x8, 0x10, 0x3}, @RTA_MARK={0x8, 0x10, 0xffffffffffffffff}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [], @multicast2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x841}, 0x4) openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:23 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="f668d5db962ed661ecfd", 0xa, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="17f09902f9392181e49a403f736e13b763ac90ee8ff4f024f505445e01de9ff82dee775f207a39702720875530df64494eade32d76406e3cad0992da27e71bf664a2717ae01e90914d1ab5aecada098cf285abadd970f77a92465e2dfc16dc5099273d8fd0ed4bcfeb6c9165720d51b400e6b14965b0ae1126e0d1a5f5ae9cc279b5dc2712c29258608daa9ff34d8064", 0x90, 0xffffffffffffffff) keyctl$reject(0x13, r0, 0x8, 0x7, r1) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:23 executing program 5: r0 = socket(0x19, 0x2, 0x6) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x800}, 0x4) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) setns(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:23 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) [ 476.341602] binder: 8428:8433 unknown command 808464432 [ 476.365094] binder: 8428:8433 ioctl c0306201 20000780 returned -22 [ 476.373833] binder: 8428:8470 unknown command 808464432 [ 476.399934] binder: 8428:8470 ioctl c0306201 20000780 returned -22 19:54:24 executing program 7: 19:54:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x80) 19:54:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000f88000), &(0x7f00002b0ffc), &(0x7f0000714ffc), &(0x7f0000e1bf43)) clone(0x0, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00'}) getpriority(0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000002c0)=""/25, 0x19, 0x40012001, &(0x7f0000000300)={0xa, 0x4e23, 0xff, @mcast1, 0x3}, 0x1c) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000240)=0x0) capset(&(0x7f0000000200)={0x19980330, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x5, 0x7c9, 0x7}, 0xa) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000000c0)={0xa9c, 0x82c, 0x8, 0x2}) utimensat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x0, 0x2710}}, 0x100) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000100)) 19:54:24 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x140}, {r1, 0x10}, {r0, 0x1110}, {r0, 0x1600}, {r0, 0x188}, {r0, 0x4220}, {r0}, {r0, 0x200}, {r0}, {r0, 0x4040}], 0xa, 0x7) openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x1, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:24 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:24 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0//ile0\x00') 19:54:24 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@ethernet={0x7}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x20000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x3) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:24 executing program 7: 19:54:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sysfs$3(0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0xfd62, 0x0, &(0x7f0000000040)}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400, 0x0) setsockopt$inet_buf(r1, 0x0, 0x3f, &(0x7f0000000080), 0x0) 19:54:24 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) socketpair(0xd, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x10, 0x1f, 0x7) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x8, 0x9, 0x80000000, 0x150, 0x0, 0xfffffffffffffff9, 0x80, 0x0, 0x3, 0x8, 0xfffffffffffffffa, 0x100000001, 0x5, 0x0, 0x28, 0x8, 0x1, 0x7fff, 0x8, 0x100000001, 0x2, 0x401, 0xffffffff, 0x5, 0xffffffff80000000, 0x8, 0x80000001, 0x2, 0x6a, 0x1, 0x80000000, 0x820, 0x3, 0xffffffffffff8a9a, 0xfff, 0x2, 0x0, 0x4, 0x5, @perf_bp={&(0x7f0000000100), 0xd}, 0x2001, 0xfffffffffffffffd, 0x10000, 0x7, 0x8, 0x2, 0x5}, r2, 0x9, r1, 0x0) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:24 executing program 7: 19:54:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x2040, 0x0) mount$9p_virtio(&(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='transirtio,ve00,mmap,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:24 executing program 7: 19:54:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000040), 0xff19, 0x0, &(0x7f00000000c0)}) 19:54:24 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x8) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000040)=0x315) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) connect(r2, &(0x7f0000000180)=@sco={0x1f, {0xf48c, 0x2a4d, 0x9, 0x100, 0x8a72, 0x1ff}}, 0x80) readv(r3, &(0x7f00000005c0), 0x0) 19:54:24 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x10) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80000, 0x80) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) mq_notify(r0, &(0x7f0000000240)={0x0, 0xc, 0x1, @thr={&(0x7f00000012c0)="899a9d8092e22c460cd95c60f1e7e99e1266074bc4b1827ccf3ee72834b2ac718c7fe204cebe48f6ee2b438ecb1538fb305748b69ccbb7a5483328d82275cfc61b3b936ade0214b5c8cfbbbbb7113b9bd78bc403521b9fa7ba21af75130d109447cc07ec888a0236c1d626ae9d4254cc459079f5e086109ae0fad7401186bf1db07ca32514ea093e666459072da0e9145ad97afaf743425eb1a1e7e236bb9e915250f3ed9dc9212ef4d09b44d05c7d649d67b632b14a6d502e33a82456adb3e3cc8d9d4ea4e258621a4442", &(0x7f00000001c0)="b4d82d469d3e71b77078231622"}}) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) bind(r1, &(0x7f0000001480)=@un=@abs={0x696558c26b2f6c16, 0x0, 0x4e23}, 0x80) 19:54:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0xc4d, 0xff5) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:24 executing program 7: 19:54:24 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x7}) [ 477.190579] 9pnet_virtio: no channels available for device [ 477.216854] 9pnet_virtio: no channels available for device 19:54:25 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:25 executing program 7: 19:54:25 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000100)=0xc) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x20003, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000280)={0xe49, 0x2, {0x3, 0x3, 0x39a38de8, 0x3, 0x7fff}}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000200)={0x1ff}) r3 = request_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='/dev/uhid\x00', 0xfffffffffffffffe) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140), 0x0, r3) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:25 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1713) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) alarm(0x7) 19:54:25 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x1) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x10000, 0x6) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:25 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='ext4\x00', 0x20000000000, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:25 executing program 7: 19:54:25 executing program 7: 19:54:25 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000027c0)={0xffffffffffffffff}) connect(r1, &(0x7f0000002800)=@xdp={0x2c, 0x2, r0, 0xe}, 0x334550fe0615be21) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200080, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f00000000c0)) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000040), &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:25 executing program 7: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) 19:54:25 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000003}) 19:54:25 executing program 4: execve(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='cgroup2\x00', &(0x7f0000000080)="65746830766d6e6574312d7db22773797374656d5e00"], &(0x7f0000000140)=[&(0x7f0000000100)='cgroup2\x00']) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:25 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa0040, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c400300000001000000000000000b63000006630440040000000f630c4004000000020000000000003a8f63044000000000"], 0x7c, 0x0, &(0x7f0000000140)="e1442e8dd488617948eb3ad4a14b03a18a7dc1d9d40d31cf4afc4cd769414456f63dbb925aa5040fa33b839e6efed069f740ba2fe18856eaa6d0d03ed27672434b4ee0371987f5677381aa9ba3b1589c46c744192b7088b13486ddc02050a47ba75111493b8e879aa5dc7210e6f230ff3b68ffcbee5becbf826b13a1"}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e24, 0x50a, @loopback, 0x8000}, 0x1c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x5c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c4002000000030000000000000011634840000000000000000000000000000000000000000001000000000000000000000040000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="01000003000000000000002100000000000000852a687700010000", @ANYRES64=r2, @ANYBLOB="0100000000000000"], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000000000040000000000000001800000000000000"], @ANYBLOB="ffffffff00000000"], 0x9, 0x0, &(0x7f0000000380)="f9af732b02d892f72e"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x402040, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x58, 0x50, &(0x7f0000000480)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @flat={0x77622a85, 0x100, r2, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000440), 0x1, 0x4, 0x23}], &(0x7f0000000500)=[0x38, 0x28, 0x48, 0x40, 0x38, 0x38, 0x28, 0x0, 0x38, 0x0]}, 0x106b}}], 0x40, 0x0, &(0x7f0000000080)="c520efff4bfe2485b0bfca8d21f9c9ff0100000000000060d8a1db881d84dea5212493801e2ad65200da0b20c18ae38737cc4a9afe7357e8fef1e97c0ddd2a8c"}) 19:54:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket(0x9, 0x80806, 0xffffffff) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x20004, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose='loose'}, {@nodevmap='nodevmap'}, {@version_9p2000='version=9p2000'}]}}) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 19:54:26 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00', 0x2000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000028c000)={&(0x7f0000000000)={0x10, 0xf52}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x20000000002b, 0xfffffffeffffffff, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 19:54:26 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RRENAME(r0, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:26 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x81}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x3, 0x401, 0x2, 0x7ff800000}) socket$inet_tcp(0x2, 0x1, 0x0) setrlimit(0xa, &(0x7f0000000000)={0x5, 0x100000001}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 19:54:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}, @register_looper], 0xe8, 0x0, &(0x7f0000000200)="e890c1c92160f531e79893594c5d1de499e33eb3a71dda5e0da86028d07fa2295206e154c35d132f899ad633b64264195101df2a557dfd490632bfa5cbc9c991fb337a589d1d6d19f20c20348d19a41e415af5318d26029ade206cc6fcc4d05107ebd123e2b4259e090cce884e81625bdd745e15ae0e0c4939db178b8ae36a6a2a13d4295ec81b63a61225705c9d641d21ae5c8707853dc4cedd83eb13590ca264ba355cdc9e7ff66cec35cdc54b846f327069df64986c8a1c65bcd455aebd79a89747878fdb94446627bcb1106f63d5e0b874245874f4830b8414114f263d0801823f14f46feb95"}) socketpair(0x1b, 0x80f, 0x1, &(0x7f0000000340)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/access\x00', 0x2, 0x0) 19:54:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000800)}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 19:54:26 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:26 executing program 7: r0 = socket(0x18, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 19:54:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="036b08401708e56458b4dc6b530e06c83b19f179ef95ca2f5d51998b8adcb00c39cb90e52396717589532620cf05180f3b6897cfe319602d234da036e096dff6640af4bdde658fa4d0415af94110001faf7e3867697ff85a7ee25f934b03c1bfdda13d56ca3b6755291f7b47d16c1537b4a5bf0e", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) 19:54:26 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = geteuid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x503000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) setuid(r0) 19:54:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') ioctl$FICLONE(r0, 0x40049409, r1) r2 = gettid() rt_sigqueueinfo(r2, 0x25, &(0x7f0000000080)={0x5, 0x9, 0x605, 0x5}) getsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = pkey_alloc(0x0, 0x0) pkey_free(r3) 19:54:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14630840", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) r1 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x10000, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xffffffff00000001, @dev={0xfe, 0x80, [], 0x20}, 0x79b}}, {{0xa, 0x4e24, 0xffffffff, @remote, 0x2}}}, 0x108) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) 19:54:26 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) process_vm_writev(r2, &(0x7f0000000780)=[{&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f00000006c0)=""/159, 0x9f}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x8, 0x10000, 0x7, 0x9, 0x0, 0x2, 0x8000, 0x4, 0x2, 0x2, 0x6, 0x8, 0x7ae8, 0x8000, 0xfffffffffffff800, 0x200, 0x5, 0xaa, 0xfff, 0xfffffffffffffffd, 0x8, 0x8, 0x40000000000000, 0xff1, 0xfffffffffffff85a, 0x0, 0x8200, 0x4, 0x10000, 0x2, 0x8, 0x5, 0x9, 0x8287, 0xff, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x800, 0x9, 0x3, 0x3, 0xffff, 0x3, 0x7}, r2, 0xc, r0, 0x2) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x7fffffff, 0x81, 0x8, 0x1}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) lseek(r1, 0x0, 0x1) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46800) 19:54:26 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x400000, 0x10) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fchdir(r0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) 19:54:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x7, 0xd17, 0x100}) rmdir(&(0x7f0000000240)='./file0//ile0\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000400)=""/160) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@local, @loopback, @mcast2, 0x401, 0x80000001, 0xfffffffffffffffb, 0x0, 0xdfe, 0x80000, r1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xffffff34) ioprio_get$uid(0x3, r2) 19:54:26 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x800, 0x8}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:27 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00'}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x800, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) r3 = getegid() lchown(&(0x7f0000000040)='./file0\x00', r1, r3) 19:54:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x3, r3}) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000001c0)=0x683, 0x4) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000040)}) ioctl(r0, 0x20, &(0x7f0000000280)="f9b4132ffcbb8cd4957600ae655848c0fd74ee74fe0a33325eaee4e8faca662539da40f3d4d83566dd4e028c6908cd4c592c025011f8ee63a89e8c294167710b5ce9e6c2d6a1383ed9c583e8be9070fd2df688a07781e16679f4eb0e4b3022614b375f390fc33253ed9d320a26dbbff1e24eb002fa28e8b54f83962dc23380ee3473eb8c8aa29dcef16771dfa00234e9674c1d719a3419802d09853ba4d3358f8911de1a9d4ebe9b3917af779036c06f0398227e3827b5d87a668f7cb909af3d1bfd4668180198343bc99177858d6ea0") 19:54:27 executing program 5: r0 = gettid() capset(&(0x7f0000000040)={0x399f1736, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4000000000000, 0x100000001}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setfsgid(r1) setrlimit(0x9, &(0x7f0000000100)={0x1005, 0x100000000}) 19:54:27 executing program 7: r0 = socket(0x18, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 19:54:27 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0//ile0\x00') rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:27 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r2) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) r1 = dup(r0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/20) 19:54:27 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xd1, 0xab, 0x5bf, 0x2, 0x6, 0x9, 0xff, 0x3f, 0x5, 0x4, 0x100000000, 0x1000}) 19:54:27 executing program 4: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000140)=""/203, 0xcb, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000240)="1f3ba0d16e26fbf5e944d8cc9f908f51c32d286cf04c19f09b263f7b15f8e28d27edce45ac346494535dd4e08e5a04aecc6847") ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:27 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/bnep\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x180) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0xc5, 0x29, 0x2, {0x58f, [{{0x54, 0x0, 0x5}, 0x8, 0x3, 0x7, './file0'}, {{0x40, 0x3, 0x7}, 0x7fffffff, 0x2, 0x7, './file0'}, {{0x0, 0x2, 0x3}, 0x3f, 0x0, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x4, 0x6, 0x7, './file0'}, {{0x20, 0x3}, 0x8000, 0x5, 0x7, './file0'}, {{0x22, 0x0, 0x2}, 0x3, 0x9, 0x7, './file0'}]}}, 0xc5) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'veth0\x00', 0x101}) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x100) 19:54:27 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r1 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001580)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000001300)='cgroup.procs\x00', 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="bc6e8025f1a55950762f817913910eeedcf58e508bc7a244f68912120f2421c71e3fa69d21c895652187b5ac60115a172e660534b24a453e4e6bad9bea69a698fc4554c3bc7061a22b86", 0x4a, r1) add_key(&(0x7f0000001380)='dns_resolver\x00', &(0x7f0000001540)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r2) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001340)='/dev/pktcdvd/control\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001480)=""/174, 0xae) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) getdents64(r4, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:27 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) socketpair(0x10, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/141) 19:54:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) [ 479.779065] binder: 8731:8749 unknown command 29709 [ 479.784770] binder: 8731:8749 ioctl c0306201 20000080 returned -22 [ 479.807352] binder: 8731:8749 ioctl 20 20000280 returned -22 [ 479.815704] binder: 8731:8754 unknown command 29709 [ 479.820727] binder: 8731:8754 ioctl c0306201 20000080 returned -22 [ 479.827344] binder: 8731:8749 ioctl 20 20000280 returned -22 19:54:27 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00'}) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:27 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = getpid() process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/147, 0x93}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000001400)=""/209, 0xd1}], 0x4, &(0x7f0000000180)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1, 0x0) 19:54:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 19:54:28 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x3, 0x0, 0x7f, 0xfff, "feebf46f31f2336209c6e658e9d9323811c69dbb93aad0a6aceab8f735b3a09c"}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:28 executing program 7: r0 = socket(0x18, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 19:54:28 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x5a4f}}, 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @mcast1, 0xfff}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:28 executing program 0: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x501400, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x1000) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:28 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @mcast2, 0x88}, {0xa, 0x4e24, 0x2, @empty, 0x6}, 0xffffffff, [0x100, 0x9, 0x400, 0x3f, 0x100000000, 0x10001, 0x4, 0x7ff]}, 0x5c) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00'}) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:28 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='veth1\x00') openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:28 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x3) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x10, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') open(&(0x7f0000000040)='./file0\x00', 0x80182, 0x80) 19:54:28 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) prctl$setfpexc(0xc, 0x80000) 19:54:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630840bbb0f33da85710fc14ca", @ANYRES64=0x0], 0x94, 0x0, &(0x7f0000000040)="8efb1e7e8ba643c85ea593c5b236cf68710710b4103e8385f8e8bb9961da22dc28f3c4cc38ce7403c9dc04d697111b0f9d7a3b09aad6c6c0a4442c50128db67145ca76851d9ae9e2cbea8dc6e51760712390aad6efcd5cdc95313a55bb5f20c3f8f563ece8cccbfa8a73e6945a2546afd8392ec6a535a37ee2f97d789a0a80be317ae2267589b74efe0ac6ebadc638413fd7015066a5a90c140b295c53fb65eccae16121782027bfafa05da93e6b791842d11146f87a2215b8"}) fcntl$setlease(r0, 0x400, 0x7) 19:54:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00'}) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000480)=""/31, 0x1f}], 0x4) 19:54:28 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) pipe2$9p(&(0x7f0000000000), 0x84000) setrlimit(0xe, &(0x7f0000000080)={0x82, 0xfffffffd}) 19:54:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x620002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) r3 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x0}) r5 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0xdc, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40086310, 0x3}, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x30, 0x30, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}], &(0x7f00000000c0)=[0x38, 0x38, 0x28, 0x78, 0x0, 0x18]}, 0x6}}, @acquire_done={0x40106309, r2}, @reply={0x40406301, {0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)=[@flat={0x73682a85, 0x101, r3, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x5}, @flat={0x73622a85, 0xa, r4, 0x3}], &(0x7f0000000280)=[0x20, 0x0, 0x78]}}, @free_buffer={0x40086303, r5}, @increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r6}, @dead_binder_done={0x40086310, 0x3}], 0x4b, 0x0, &(0x7f0000000400)="92a59c1a9f88177b7925a07c5a19af39be21578b0f34dc447b312ca92b803fa20a5b9f5a833c9eccf5bec4d12a42b61a58f8cbab758d09a1919fb7a106a915e284690a96e1b92021c402b4"}) 19:54:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00'}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}], 0x3) [ 480.667081] binder: BINDER_SET_CONTEXT_MGR already set [ 480.672739] binder: 8822:8824 ioctl 40046207 0 returned -16 19:54:28 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x130, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) ioctl$TIOCNOTTY(r1, 0x5422) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000980)={'ah\x00'}, &(0x7f00000009c0)=0x1e) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) write$UHID_CREATE(r1, &(0x7f0000000ac0)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000a00)=""/145, 0x91, 0x200000000, 0x40, 0x1ff, 0x2}, 0x120) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000740)=0x100) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="e5dd210cd812a7a4ea4c641f03281fccfe2fec5abec03afe349be5a360e2953e75c7eb0927ccd57d592f88c28a4ff46425189b4c304f7b179cb3063ef9f11b5af52ee2be78b415f41b6c480948574ad71d4fec94eea6eaacd04af64e58286f209b2c0168e441561d2eb735cbdeac973e36eca0a8699e01aab5c19d9395444a8e20778ee1fc11b3d592239278da6b9c5f7ccd824baf92e722cafd7a5eede5537c49bfe5bfd80d45700633ff24e4b6374f223dca75115d8c400790914e110e114a5167c21f9f5cd6f5e1e9a060b6c735898acf1a04db9957522541ffab146a276389d55b22f5587308c07e11f38aae58", 0xef}, {&(0x7f0000000600)="dbe7801fc08189e19ce78eea092e6388ef289e4b6c5d2c19a71a89443964eb3ddb300d5f305960674a0c4206289ac9c83af590ef5c9ce3687ebadc5e12f19bf95c49b2667c74e5e36d6145bbe757e2d92e04bbf3357904cf83e72508b41a402c7c652ee6529c515161a9ba6fb68269920bf6e8b3973c025ca2a7", 0x7a}, {&(0x7f0000000680)="d2d71e9dda219ac2e6cb2387745fe68f15725ad9fb7639e6a7c431e09253e1a79641aa8c963c8ccf94c94ef8370b81ce012029c84f3bbe709a33fc965e667e9f05e59ca7563f963193bf801de6455c5bb0b949ecd8a714e74976490a35a60b88f3088e4c59cec2396cdebe8bd10e57a50df8edb2dbbc28722f7a722b12f20864de6b4d77ab7568c821bcd4044b0d9374094dc0795b8be71e32eaddbc3361f8db9535bd6ebaeb076ce2c82164f72505e507b16cd7145ef1", 0xb7}, {&(0x7f0000000880)="807981f9a3ae742cf75027c7db99a7afe63c6b72073f0d0a801b443d5ca4e280b13f3c23a682496ef6991ec459461f73c5bf546398cdc796a3001e4d883d408df6879eb681ade28f8381987e66b5a9ee95709e414607e24d104ce688e44967976324521036ea36847997727448a78961be60e4e7d04dd2c3f036d86e55b440e489e5ba404053d818d93d79b4e32a645b4604478cadbfa60e2681c9a9bf23d788b0ed3753b12408f3eff0368d8010b3e8f32b0ba8c93c50d2822805da3acbd4ed4270e1", 0xc3}], 0x4) sync_file_range(r0, 0x7fffffff, 0x8001, 0x5) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000580)={@rand_addr=0x1fc00, @rand_addr=0x5, r4}, 0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, r4}, 0x14) 19:54:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:28 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) 19:54:28 executing program 4: mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0//ile0\x00') 19:54:28 executing program 2: clone(0x0, &(0x7f0000000140)="59653c18a5e35fe2c9935872b9bc73df3a5a6f9073c1897e51f1f10b71f6c80d46dd625f43dee736d60edcb7231af3ea4dbe25b47d0be78dff0700000000000018af43d66efcc43bdf878369fd1f3ab7a24d3745cc3d6278ecc2f374cf67691ff58815da53c70d85692569edfbc12320d3a5c8003c7974a60000", &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002480)=""/4096, 0x10eb) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:28 executing program 7: r0 = socket(0x18, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 19:54:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x4e24, 0x8, 0x4e22, 0x6, 0xa, 0x20, 0x80, 0x6f, r2, r3}, {0x1e, 0x8, 0x7, 0x2, 0x5, 0xa7d, 0x4, 0x100}, {0x6, 0x3, 0x7db4, 0xfff}, 0xc655, 0x6e6bb6, 0x0, 0x0, 0x0, 0x2}, {{@in6, 0x4d6}, 0xa, @in=@multicast1, 0x3504, 0x2, 0x3, 0x209f4ba0, 0x97, 0x7}}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:28 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = epoll_create(0x6b) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x0) 19:54:28 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x11) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x81, 0x3, 0x6, 0x0, 0x101, 0x4, 0x8, 0x1ff8, 0x4, 0x0, 0x0, 0x40, 0xe9, 0x7fff, 0x7f, 0x1, 0x8, 0x100, 0x10000, 0x0, 0xfcd, 0x9, 0x401, 0x7, 0x7fff, 0x5, 0x3ff, 0x7ff, 0x8001, 0x9, 0x1d2, 0x8, 0x0, 0xfffffffffffffffb, 0x10000, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x8}, 0x8, 0x100000000, 0x8, 0x7, 0x57, 0x4, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffff9c, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x3f, 0x0) fcntl$getown(r0, 0x9) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x6fd5, 0x7, 0x7f, 0xce3a, 0xd01, 0x625, 0x0, 0x400, 0x1, 0x1, 0xfffffffffffffeff, 0x800}) 19:54:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)=[@free_buffer], 0xfffffffffffffdbc, 0x0, &(0x7f0000000040)}) 19:54:28 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x3ffffffffffffe93, &(0x7f00000000c0)=[{}, {}]}) 19:54:28 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:28 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14, 0x80800) bind(r0, &(0x7f0000000080)=@ll={0x11, 0xf7, r1, 0x1, 0x9}, 0x80) 19:54:28 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000000)={0x238, 0x100000001}) 19:54:29 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00'}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/141, 0x8d}], 0x3) 19:54:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) 19:54:29 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0x1f, 0x3ff, 0x0, 0xe}) 19:54:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) 19:54:29 executing program 7: r0 = socket(0x18, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 19:54:29 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x3, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x111800, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40200, 0x0) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1400) getsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @remote, @multicast1}, &(0x7f0000000180)=0xc) truncate(&(0x7f0000000000)='./file0//ile0\x00', 0x9) 19:54:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x0, 0x0, &(0x7f0000000800)}) 19:54:29 executing program 2: clone(0x2, &(0x7f0000000140), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000180)="272aa80151bf01083e1aaa549ab0eadd5c9a05cc03178d298654e8b359b601c1b4db2b022d3d7319372d06231c1cd3d4826888250ef6b1ed4abe1b4070b5790000000000001000005536395c7b7d4a8a83a6b89c330f95fdbb74046c") mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000280)=0x4) 19:54:29 executing program 7: r0 = socket(0x18, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 19:54:29 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f00000000c0)="3291df37d6d5eaa493cb4fba82b481aa4e9c7f266640044122cb6059a3f97c84879b2defd7e69796c7aa6ecdee1c1b58e53b7ecf39d6e39a7464c39bc6bf2b3f19875d728578de4ef496fb1279dfc7317ac806629d0a937f1cde389bcc741f911df9b372c6f9331adc5af842f378b68b", 0x70}, {&(0x7f0000000140)="1bc9c5bb6a79484b961845c104e130181d4aec719beec7bce21b8553927467f2a539", 0x22}, {&(0x7f0000001400)="e420530356463a655b3c9b0009af22ff3091be08c0d4fac32e02e9d9f6256f6c597c20abcbbd562de3fa3052507ab12a86ca0bdf6eaef19969a7ed2f859a9a05b1632a5dcdd91661244b25c1bfff93464cdff2ff66d6b68af8dbfc02be97f91ddad910ed5f14e603b4f37674084af006671e7dffdffb1a8be589eccf165fc3ae8adee7aad04f19826f5be19f3b88be41d170609d6f34d03c3a12aaf45d61e07e569ce35cb52d6975a31d8bf101d1574980ddb608c887f214d4ac829adb7b2ffb6d21b76d7ac7d379e6168b5edf32cdaea925a06cd7c0d8a0f4f100a9b16cac70d8cfef1ff86f4f1b", 0xe8}, {&(0x7f0000000180)="28e08525141b9df5b80e56d6ab671ad04dc91d1e7a5e78d2ac69facae5500f46fae51c831ab21a69aace1669", 0x2c}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000200)="4485e715ccfe1cc065c7d6605a878cd5fa290204f92d63c5c38772a58156b85f820404208504f08e64fefbd2ba29dd260c95f0ad08", 0x35}], 0x7, 0x0, 0x0, 0x8000}, 0x4000) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:29 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x40, 0x4, 0x80000001, 0x1, 0x128, 0x9}, 0x1c) getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff]) r2 = getgid() r3 = getegid() setresgid(r1, r2, r3) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x1ff, 0x4, 0x8, 0x0, 0x0, [{r0, 0x0, 0x1000}, {r0, 0x0, 0x100000000}, {r0, 0x0, 0x3b1b}, {r0, 0x0, 0x5}, {r0, 0x0, 0x5}, {r0, 0x0, 0x3f}, {r0, 0x0, 0x1}, {r0, 0x0, 0x9}]}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) 19:54:29 executing program 3: r0 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x14) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000600)={'veth1\x00', 0x20}) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0xfff) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000480)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/196, 0xc4, 0x3, 0x7, 0x9, 0x1, 0x200}, 0x120) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='9p\x00', 0x10000, &(0x7f0000000b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c5f25aa0800660700000019d1bd9f3eb9d78886919793e65905813981d508f5dc1bcbc1173347b0cd7ac471cc50802828df5aa0fff086c970c423eb78b75c367e8950e95999d997a7a4efae0b38f905388d5755005502910f449aad7443878bf98595b45ab29f8a52fd2d06d9386e7130532f04bbcac867ad4937e07b941a4ffe8324c4ca5b749a4bd2b12f6955883fe3f850ee998e425733cb03b628484ccfb109ee4c796dd1cb835d3c9bace20d5ae0da9a316d82baada55fae61243a5af8", @ANYRESHEX=r0, @ANYBLOB=',noextend,cache=fscache,access=user,\x00']) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x9ffff, 0x0) tee(r1, r1, 0x800, 0xc) getdents(r3, &(0x7f0000000880)=""/139, 0x8b) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)='cpusettrustedvmnet1ppp1\x00') readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7274633000282f6465762f756869640020232c7b2a707070302774727573746564202f4165762f7568696400202f6465762f7274633000202f6465762f75686964008a7e2dc35cea43810aa28e3861967a4dc8ec93c767b77719d4be5e8970d2917d0fbe426609609d3b3aa8ed9f17ebe36b35c4f7f30c4cf29ce2348eafa84e60cba204f64548a557b8e5bbf47d2715580a670e7b2bdff2f314f74201637b195bfce9c6084417f864d390c812dc408ddb191a8b69066741b7ac8a1a9684e9072c9beab2f1aeefbc"], 0xe5) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000740)={'vlan0\x00', 0x5}) 19:54:29 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00'}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}], 0x2) 19:54:29 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x8002, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x5) 19:54:29 executing program 5: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x800) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000380)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) pselect6(0x40, &(0x7f00000001c0)={0xfff, 0x9, 0x3, 0x401, 0x1b, 0x8, 0x3, 0x95}, &(0x7f0000000200)={0x3, 0x40, 0x3ac3, 0xfffffffffffffffc, 0x8, 0x7ff, 0x1, 0x17e}, &(0x7f0000000240)={0xffffffffffff0000, 0x5, 0x9, 0xfffffffffffffff7, 0x7, 0x8, 0x8001, 0x6}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={0x100000000}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@mpls_newroute={0x2c, 0x18, 0x2, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x0, 0x34, 0x1, 0xff, 0x2, 0xff, 0xb}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8, 0x4, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x600) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x5, 0x401}) pselect6(0x40, &(0x7f00000000c0)={0x273, 0x5, 0x8, 0x9, 0x80, 0x10001, 0x1, 0x7fffffff}, &(0x7f0000000140)={0x9, 0x5, 0x10000, 0x40, 0x0, 0x10001, 0x2, 0x7}, &(0x7f0000000180)={0xee, 0x7fffffff, 0x8, 0x81, 0x0, 0x4, 0x2, 0x2}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={0x80}, 0x8}) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:29 executing program 4: mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x2) 19:54:29 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000280)={0x3c, 0x2, 0x1, 0x4, 0x2, [{0x6, 0x6, 0x9, 0x0, 0x0, 0x800}, {0xfffffffffffffff8, 0x5, 0x8, 0x0, 0x0, 0x1804}]}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000001c0)={{0xfffffffffffff000, 0xfffffffffffffffe}, 'port0\x00', 0x5, 0x2, 0x20, 0x6, 0x0, 0x2, 0x2, 0x0, 0x2}) 19:54:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="450000ae", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) 19:54:29 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) personality(0x400000b) getdents64(r0, &(0x7f0000002480)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000240)={0x5, 0x8001, 0x5, 0x837d}) 19:54:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x80) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x45f, 0x99, 0x0, 0x4, 0x7, 0x4, "ee1ca436a99044766d92c1e26d61e1932bd54fa2bf27e59d5876db4b956e7dfbc085b5d7cb1ea324907ea8232812c6c1e2323e8a6bc811a492aa246c63f5ea68", "da34ce9ca3bf5dad06221dedc163abeec2a964813e29cc5606704d5d65a55aaead7963f64d6cfb42e806bc8efef981eaea6b43ef6f98c4f4cd7f677553626f55", "46b8bd5a7966f84e1ad48ec1dc537802b4fff51691cab3f5b4224d21fcc74195", [0x8, 0x1]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000800)}) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, 0x7, 0x1, 0x800}, 0xa) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, r2, 0xd4b1, 0x82, r3) 19:54:30 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@hci, &(0x7f0000000000)=0x80) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:30 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 19:54:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) restart_syscall() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) fcntl$addseals(r0, 0x409, 0x1) ptrace$setregset(0x4205, r1, 0x207, &(0x7f00000001c0)={&(0x7f00000000c0)="02adf2cc33c0e9237b82bd581f367a945ea669569679978980381ef37c7b9f3ceff97103097779930e9f62e79cc7f6a8ae4cc44bc6bfee09df4ac988159f63719fc73979df1f3b13dde869f625ae73a56b4fe1253bd5cc49ec624b946397154acc925a09480f496a3ab523768aebe885ec8a4e0e6ba63aef100a06ce837aabd1a2411e685b6dd90b288bcd9a241cc1d9f2f69254bfc1985659898fbe15f24278ac4cc9e55df39249806b98dbb9e1e8560f9d20ea2f7d40460e5643aea3f169662471cf2c33c140c218f8cb0e10aac2b106ebf4fd92627b02514f210f8dd53dfa61989fca761720e1fc2ae2e859beabc4b64b05e6eb594d", 0xf7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x2a9, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000240)}) 19:54:30 executing program 7: r0 = socket(0x18, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 19:54:30 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000012c0)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r2 = getgid() fchownat(r0, &(0x7f0000000140)='./file0\x00', r1, r2, 0x0) 19:54:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140), 0x4800) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4800, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000180)={{0x2, 0x2}, {0x1f, 0x7f}, 0x100, 0x2, 0x2}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000fb124057d3b8ecd6a0d67165b18a26b5acd8f604b72619197bcf68cb1aec2e01d0f24a00e9000000000000400000151cdeac615f00000000000000000000"]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xffffffffffffffdb}], 0x1) 19:54:30 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f00000000c0)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) 19:54:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f5c5e744", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x40) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3d8, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x8, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) 19:54:30 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'bridge0\x00', 0x54ae}) r2 = accept4$inet(r1, &(0x7f0000001cc0), &(0x7f0000001d00)=0x10, 0x80800) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001d40)='veno\x00', 0x5) 19:54:30 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f0000000240)="9c412e41feb8c060b2dd30da74ac16175b68873f6967e20f66245d517ea7b1c665f8bffff38c99c5e8063306a231ad41d16ff54597dffc5acce2dc8dcf05d29d28231819fb3ec090685617278fd7af2574f3c02c8e82e68e10f4d7f572ea50ca") r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 19:54:30 executing program 7: r0 = socket(0x18, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x40002cd, 0x0) 19:54:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000200)=0x3f, 0x4) 19:54:30 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dummy0\x00'}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000000880)=""/140, 0x8c}], 0x2) 19:54:30 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)="797578933b363c9ac7c131ffed7a18354b0557efe35768d2b7db51bd033b99265e12982ce20f8554d11fd43df69c3afa34efdc725b9fd87866dfbf5cf52d6f7900b282a28dc51da7edf73afbbc7e164b7d4408ca6d49048105dd294afd7feb3c6877f7e4a3b0d49cc2c1c197455325c4b477") 19:54:30 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x1) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') truncate(&(0x7f0000000000)='./file0\x00', 0xd1) lgetxattr(&(0x7f0000000040)='./file0//ile0/file0\x00', &(0x7f00000000c0)=@random={'system.', 'cgroup2\x00'}, &(0x7f0000000100)=""/158, 0x9e) 19:54:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_VL_CLR(r1, 0x7014) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/218, 0xda}], 0x1) 19:54:30 executing program 2: clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001640), 0x4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) connect(0xffffffffffffffff, &(0x7f0000001400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="09dc3c814334"}, 0x80) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) fstat(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000180)='./file1\x00', 0x100000001, 0x3, &(0x7f0000001480)=[{&(0x7f00000001c0)="5d9d546e75ad5f53845d6fd7824716985af9c0309679cb468170c6640a61a259e7cb1901d67ec7d705c94a157ec42e3bd69a09ad85", 0x35, 0x8}, {&(0x7f00000012c0)="0a42d6b8d5ec8e17fee3884b458291fb293e498f32352289628da359b02d283e81719e9a9bc7dd1c3a44eff4c1bed0cada1735af8d1e1c0e5801bcdd5caaeb3d8fd42c5cc79902e4d0b7b9558bfd07b2d876b0555a746cdf8436f1191f5b53c576a1f5be04fb00ffcbb51e89001e420d129362d06bab224cfd52e4ee24ffc4c7cb0c224fda76b416c9f77eebf7852ac4edde98d892b6ecaf", 0x98, 0x8}, {&(0x7f0000000240)="8e1543fd5a2dfa830a003118939b8f92a5f9e5c7f76d4ade372487bd99177c41ec370850d523f74efb57cdc7f1a32a96331529e2f2a0cc9ff2cd51216024921f4aef99055564dec3752979ad1c5b42d4c22d", 0x52, 0x100}], 0x40000, &(0x7f0000001580)={[{@resgid={'resgid', 0x3d, r1}}, {@lazytime='lazytime'}, {@grpjquota={'grpjquota', 0x3d, "2d6b657972696e67eb47504c29"}}, {@noinline_data='noinline_data'}, {@noheap='noheap'}, {@four_active_logs='active_logs=4'}, {@whint_mode_fs='whint_mode=fs-based'}, {@grpjquota={'grpjquota', 0x3d, 'proc\x00'}}, {@inline_data='inline_data'}]}) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001680)='msdos\x00', &(0x7f00000016c0)='./file1/file0\x00', 0x9, 0x5, &(0x7f00000029c0)=[{&(0x7f0000001700)="e3ebf459541911b6464d8e815adecc169338abb0d998ddb23c05afa1d6fa435fc3f335f49fb750bc709942854c6961370154b588cad390815b5792a6ed8918fee726021710fa6cc9b92e2a601c7d2ab1b42653c8015d4eb54130ce2ac7e588f077667b0fa0b340f274d8cfd9109a6668b857fd0271a20b1e42197514fba59c1c46bd8da415", 0x85, 0xfffffffffffffffe}, {&(0x7f00000017c0)="a590ccc6c30d89822f69d13d4cfb0c9b0b5f8335a83988b469cf70638dc581f261aa04396d8412cd2d258d6866fffd4ee6fce477edc27f2c4c1ee3546f7f70339c1f3a83ba207438855a9d0a42c9e85414f6461074", 0x55, 0x9}, {&(0x7f0000001840)="50bd180d8696f0a3dbac92b18844b4e062aefe15e9c8a9609c1d07cfdab3b01fcc16bd1a3b70fee88e041d7a7302ec23538dff237b0f71ddb09ede7d2d41d4c21cfccb38e4c45f5cd1021ca4621ddd39c15a0b340a6369a4a526f615735895ada7b60ae4b0c3fce21abac483ad034d8940f515f6c463014de16b09b151cfb435c465978b4397a66abfe29185d7636629e1e832dccbd90f651c8641581c447fb49f801384203748a2ef0135e18c68ddd3e1608c31ee0abb5ac344ae050eadf457afd6248dc288bba8a8b2ff19da427f126ebebac004fd61db1dcd0913a472270a545fd34adc850a83a211043ec119842733299377bf2ef3ec01745d4a0a6c9b8380fde2968747e148687199316f255370ffa621f7d0fcc06a51f707d4864b712299ed008a44eb6309531543f0db5a67ce644f4c1915febef8925925f116df70230f068576c553aa381cadf4e4e54f104bc490276868570993223b09f192df762a957e5c08c4692908e49efbe07b7ea6e73d871be0d9ebcc82c606ae1dd7c61404d08e849750a23018e01916ba8beaad6772ca1538613dda052db21785248fb3229a7b2ab829343b4667703cca23efd50010f612b972aa50468916034cf187d5a68c108bec4e6b346d0ee99877076bfca999dfa54f54a810ac1f0f2d0eba8d837287468e94d09f64ca9375ca0b85467e454d6ed5e846812227ca5f9fa854c8efc1648aa1e81c4ffbbaaf0ffde07a733dd9d07b097ea2e7cb17f1a2f94e9b3e95b6fdc52714597a00fad8d509d402abd8da8899eb4e7040cfdbf71595703dfa3ebb3ee3c07fb6353841b2b3cd5e77707d7b65d9eeda8abc9abaadbbfccf48bc4a6009dc9daeff59fbe43fb4ec913546bfd9d8949345d06dc9c526ec6ed5932b9e73fefaa15650d7d35b86e480221fc3ea6792cfb100a6c180e0b6be9743fc5facc9633e03fafcc199ab084a577aa302c8757da6b0351c92d8e06d5e86af22b89c7db71bdac37c6e8d6a014e99b14f3f11169ca2064f5050b915d9189be946bba1c10f306be8e6fa12d08eb194057220b7655ab923596edf058050d5cde64f04fb1dc660f3f61f8e241228ff402b11319bd122f0bb90f2d8a9befe5e140b8d6ecaecaff508cc065d9074c9f0bcd4901a510375b8852c12ba551ec7e1e9ae4729b52d3a5ce3c7d47bc471ecfc53568ac12271e5d15a7faeaa223ab60ffdd8ca12f4fd78487076226b05032c47ec6cf49b2c49062bd46daabfc44cdb478972dda76959c7d91ed83034771cdb6adc4930fbf902c24a14b7550fcf66b4acd5970290e6fa6d1745775450fa9d8daba27c930cab705a8ba76b510654bce7113be9591a2d5ef3d9af749e459bbd7e693e012dc9a0d904d2fbb4ae49f15371b06b70776444e1a4213956f28068992fefd226d4f423148b2469cd26c1ff3f82a636b994254252e084724d8ea9266cf18c9ff1d525050b13d91a65a170d5ae282c4c31b2e7d828e1addd0afc2746b8a896d51b77891763cc54445d741709b083f7ff7662138cd84a034d56cc7684e99392ec6ff5c66f039b10452a49f7a38ed08ca4a71e798386fb87ba77cea964d14ab3ef774b07ebc57882c7125ded83f6a5269588aa8a522a0f2e402de8abb99c21e51c8b1eb582f1f2b2288f19000f6e3171da19446eb637e583cacaec8e518119820a4d087f0c4cd45bf2cf34ee0ba7588a7aeb39dd6cb54df739a6c54cea9470d4a3703019f306f3871e80e2670bc2aaec3ed22ccb3d9ed4a6294c8b82a47738f1d28b3462cbd6b05622df1872611f57c633cf8681bd86528f1f668ec06d0789da21dabc5d9abff990b98edf678994ca773cc2a972a2bc27ee9d97d42edad6fcc1de9c71c3fd75cae8fd2d5ab53c1fd044801cd7194b2794373d2b5787e7986118fc71961a79e6926d5dbb36d1f7d5bf60793c74f0e436648f0665b86e09cb8e11b7b6d8ba4aa576b718ad4f786862305ebf7de616f49bba814ecd70ed614ce661fa25a2fb8ec7e3955b53e83ec9817e0b9464b5d4e2bc4ed67afc0add72fc6a84c764da67df9c09400278740ec90791165ad55ffc7c849544d1143b3af137ee45f66f87662772e02265e4658999c6dcfa4680189972badf11604fb45a84e72c86366fcd25ceffe8e85d7f5c5be859240d88d41c1b5c39eef5ce7630130fefcafa43c7db32f21711f9fb716ce37c5419c5c37bf4e9bb8e98a90558d47b2508fd0978698c4a4ca68f22a24ce0c6824b8668325500b5a4a296033eefaec24f6b0fa36b5510fa2dd74bfd0463ec57c76a3f98d29196d86d596b05bbec645d3ee8625e524f627afcf80f7ef4a7d58d1c31f8db43699db1e22c5354c215d4953011f9067a3707fe7ac1efffdec3e57a9de543e6d75d392ed4d8cb30ec27c96c275c136b7b892a25d77ecc9300c4f3ad6c43880f2ce6de5eeedb23c4b7d122d8e013bb818ea6dc4bc1f5075d572f02be30965d83cda1f9d99037a0214f4d8f1f26baabf88664359a8b656d07a07950c4c8b55806a07bdd835db383b3b34a0daddd01dc2e5a905429683095e0c502643bba687a45e57ca448e73f0f4a9fc0be5677ed28bc36f494e8efae16b729e7c0df3dcff53cdba435c9e8214cb86e2ece853dba3d59f466b8cc8b55f9b9e3576110e1a6324272f1d6ce8080666a6393235a5f514460728eee319866e925939b54eef1095f9e21fcc2043623e7ac15c9d6b06419f2d678b42d9b26ad1450811cca11b501557923515052250ef82d2a364bcc13fffd40576e77b215664629eb22f8c142e6bd8da8ef7a0f5b3b0dd3f8b932fd79fa543fc605a1290364933c7107498b3a11717afe75bcd1e67c76562ac81d630b17f858a9709d87a174ccfb74378b59a0a4c63f5c3c381857da3ce804ab56c2c0333a206b7be2bd2066f4852c2759d6b56e183603ba8dd1adfe7567f4003c5673a9ae71b56ce2cbbbc861742e054a571c54e76f3c4e8d07a3cfc07607dd4144c669562caba8c903c9d10aaa37cb89b6df62c8c62e118114057a4ac72f146a71ffaca176094e24c8e6927961dbcf76a0ae781608db6777aac0310fee7d681679f7ef12d708ad460eaac64689f8f68f58fceb81242c786ad23dbdb0534030df197cc4a4c0ce334b7d29710bfd90178d12375297cfd1ee46e40c806b0115508037a9a4450fdc0a6977076ab9027bce474f2e71d697a963b6845557b85651469d799d3417ecb205743692d67b551a1042bb484efdd0b5e39f71606ca4b8233ea4b3b6b40f41c987611096236e3dacf858c3054943670649d9d099442bab564fff3ae971efa7dde0054fc6b55bcd96f6bf6dedd12d7c12af4673025ce9b1c2be257012c84c6dd371e8196d10d661ef57a10afa1e70f6a7892c27b74c84bdf5457966b8bb902257823aea459a5a10c9945025da79f287f2ae970b08f5dd19219a26ee8dd7344cfc704f6758d6e839d63d475349ec2bee7b3e762e30f77fb5b7c67ccd133944768be445f627367694aba240c1c0af0617b2a502ccfd8fdc6f91b471ec637cb3095dbf20de4bf6a6ff9c693e71400842660b9e0ea09bee17cfcb517eab6821484e4cd7fedc316aa83a731c57527af2ae3a3d025799448b03a58b65dd55ba468f553e2c96b4d8a69590db1cffe69a7341b8314396bc4ba4f766f6def5d1be5988096ca872dd352d809cb39fda3a4c5beced1d99b1eccb3d0b8695b35aca85e529d7ecaf37e7e7cf575ee84e17c515d808a9a90c8a3ff3a9f8da0c461a623e353fdb718a464d8eabd1b1e44f1b2ed5d1f294dde454e8e8bb014f1006eac3cf88eaa7f4d57a52d46a6a0c1f6cf143427546719a8a78f236194cf01618820ebd9f19d79745413f003aa2b680417d5b2fdb0072870df94b7072fda6a91613406e61251066d66de95e77f0b83f08541f6479848e71d569e0105be42367b3e2356153e04b1352adb966e1780fc65baa7a96e94675c7b6a93c99e2bee86b5236d3161fb37d6e8980810b508994bc187714a8511560438411a23544a8abe05b53a98adf831ec29aba9e2705a672353e2e234394f1326d222cc834ee83d1e25019786e64489ef391cf44c346932596d86fa31982b5dfba8b2197548c887b9d8c02cd7a251ad1310b1c206361e6a5d364091fab819c46254b5be091b9572800e48905a0c478cf74e3341b9d43889846cf74d795fd04fd573a497caebe1b2dca44dd030b8fe31ae283a4e5030c7a3c48b8227c2d2d96c160c46cf98b84f897fbf9a83516c0fe57f5c1f73fe5ca82c73af93cedb960e818befde276de3c91125265f6e1f699c581ffc13cc2b7f894bb61af062c228c415c898a80ddb1e59730d64228beb4db5fd15a0cacd1731076698aab14f6831d37652271557e10e7c01a482d05da905b5b732063635c98db4344141fcd93b2cd468fbcd13a568c3ed572c3b3ea96458ce23e0a6cfe5d33dc29f6ed39a2946a1c9e85a04b2a14cfc6eb1e8b732e29e9a8d7f30b5040f93eea1d63979c739c41bcdd4b14c7c868c45ac8dd84c836c779348b08ee9728910d11550ac8db1ed5618cb2966826cfff58a9c91d4ca19af9bdbed4f1ac8e22314c061c047be20af2db13388d266dc3988efce78783621a60b16c09084ba711fba45d35dde617287d060854dc3c49a9dffae71a93ce25bd0b76a408ddee394fb6e04948b07f43a939563d0a5f0c77b372dc04e9aad3e3bdc4cb3b64d9a1cbca8018539c1771539d5899b44ee6de54571c4370b620809dec8258a82e9d3c905ab4f5019fff229c4d6a5315eacc488a4473b77dfeabf8f7552ee792185ae1698ba137044e9bcd6e2e817f8b01aaf4b4a8983ff1c59449240db9b41e9a0d0e20cc3665585ba8370288d67aff091b781df2753de695febfea46fd7cc5dba0e6cf65ef6d6bcdfd1bb2eb795c6b67f82a1a605d8090e3385ae2538d3aa92aa527386a9346ebcf5ff5bb44b37b729d8e7dce2576bdd481ba917db08518f6e56a98438d26f975a2bbeb8c82c6e24eb22e53a787a2b4fc8636c1701dc8417fd7c8bf706447228280606342fd52087ba15f1737b5fd75fb7712f45c46b4c93a57ede3b05cb77f57403163f660eaf262fcc49d0ec4560510ea98101989b318980b43a8d6933de7c538f119bc8ba5e241c1ed9a1f0639f08714f265197e44031996e98d854dfb6c4b38605aff2477bb29eea2e462473c87ce3424ddf62ce25cdf5d5cb6a1851ba8b65b4f405d1b91d7eb83bc7f649fdd1d2673a4d63cdd1932d6732a7fdc798b50812baa1d8d7ef8cbc25497712126f22e42dd91b1054831053fa971652978933aa987d172fd76bdaad82fcaf1524d3959310a5ad324e42e5c5366a9dfbdc76461db381856041af141f641fa3160ab5281c25226832154fcfa6e56a0c67b3994b40a064e11e0467f54f41540ef8f6fbdf0eca0cc01fd3bba11dd6c4eed396902049200f2f5fe4f22c802c77e5aa648ebb467dec3947e571256fb6a486caf0969b33beed1b0399690bc6c74488d51b58d2501590616d6c7024aea1eaf26e9d6e683393793350e53d5810e79a36141f829ff55f60c4318c3efb31f02906daee35f8f23e6a6787b4ec697aac63cb00ebdc88c5fd6dbed2cdf733a0588c04cda1995debd26954123a6312e1ca2bbb5c35031084f2d23a273bb658be31c3601fdc25df77ddeaaffdf87c8bc07e99e250ec2b885ff3ed0f57fb72adc44e63eebbd88b392b5da415c5cfa5f2d656fdec6d232054af6d9f8039d0296b61c9627c9975019be4fc06ed96f9bb167616781bb27d8b92597", 0x1000, 0x4}, {&(0x7f0000002840)="287e9a3d795922b5a9bf4c968746b0b72dae6be91c13b026d7854c9170a5836718ae6c5fc2e8cd42615622c95016443960082abdeff351be663971af41cd01d810943534b8f298d810a562bc491429d07dec4a36e7dce74be2fa4b2cef7cc31c0fd9fb5c54bef978803f875a02a402b552afe4a09f3204e8707abcf7bf022f66", 0x80, 0x4c00}, {&(0x7f00000028c0)="50f09878d2c1b5fbf222df52130a1cf2af8bafbf68aa4ac506304102bebc7d41af8822c6eb778e7a86019849394a2c2ba1bba12bc2e3a719639f3faa2a6a6ee14e7e2d10118e16600066a38b9aa5d90559b07e39752d36a090eeba405d828776a1f7858195cd590bb40848ef8a7f5b9be0717421a0a1f010d3ccab33ba1262ac68b45ea722175957498b8fc6937ce7b3191fba6c740c0b94584ba6e47711020f9ea3958b97c55d5aa89ec06d3b4f05b37da6eba5123fa8b7a8f139288805c86c88828f884c", 0xc5, 0x80000001}], 0x0, &(0x7f0000002a40)={[{@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@fat=@nfs='nfs'}, {@dots='dots'}]}) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) [ 483.204422] ================================================================== [ 483.211990] BUG: KASAN: use-after-free in ip6_xmit+0x1838/0x1b80 [ 483.218124] Read of size 8 at addr ffff8801cc3d98d8 by task syz-executor0/9034 [ 483.225558] [ 483.227173] CPU: 1 PID: 9034 Comm: syz-executor0 Not tainted 4.9.124-g09eb2ba #31 [ 483.234770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.244143] ffff8801c3db7540 ffffffff81eb95e9 ffffea000730f640 ffff8801cc3d98d8 [ 483.252519] 0000000000000000 ffff8801cc3d98d8 0000000000000040 ffff8801c3db7578 [ 483.260641] ffffffff8156c35e ffff8801cc3d98d8 0000000000000008 0000000000000000 [ 483.268674] Call Trace: [ 483.271294] [] dump_stack+0xc1/0x128 [ 483.276644] [] print_address_description+0x6c/0x234 [ 483.283297] [] kasan_report.cold.6+0x242/0x2fe [ 483.289509] [] ? ip6_xmit+0x1838/0x1b80 [ 483.295124] [] __asan_report_load8_noabort+0x14/0x20 [ 483.301862] [] ip6_xmit+0x1838/0x1b80 [ 483.307306] [] ? ip6_finish_output2+0x1d00/0x1d00 [ 483.313782] [] ? mark_held_locks+0xc7/0x130 [ 483.319762] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 483.326839] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 483.333500] [] ? check_preemption_disabled+0x3b/0x170 [ 483.340326] [] inet6_csk_xmit+0x27c/0x4d0 [ 483.346206] [] ? inet6_csk_xmit+0xff/0x4d0 [ 483.352076] [] ? inet6_csk_update_pmtu+0x160/0x160 [ 483.359999] [] ? retint_kernel+0x2d/0x2d [ 483.365698] [] l2tp_xmit_skb+0xc45/0xf30 [ 483.371392] [] pppol2tp_sendmsg+0x4e0/0x790 [ 483.377452] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 483.384036] [] ? pppol2tp_release+0x2e0/0x2e0 [ 483.390183] [] sock_sendmsg+0xcc/0x110 [ 483.395799] [] ___sys_sendmsg+0x47a/0x840 [ 483.401581] [] ? copy_msghdr_from_user+0x560/0x560 [ 483.408144] [] ? trace_hardirqs_on+0x10/0x10 [ 483.414193] [] ? check_preemption_disabled+0x3b/0x170 [ 483.421067] [] ? __fget+0x20a/0x3b0 [ 483.426325] [] ? __fget+0x231/0x3b0 [ 483.431579] [] ? __fget+0x47/0x3b0 [ 483.436746] [] ? __fget_light+0x169/0x1f0 [ 483.442518] [] ? __fdget+0x18/0x20 [ 483.447687] [] __sys_sendmmsg+0x161/0x3d0 [ 483.453462] [] ? SyS_sendmsg+0x50/0x50 [ 483.458977] [] ? ip6_datagram_connect+0x3a/0x50 [ 483.465385] [] ? inet_dgram_connect+0x11e/0x200 [ 483.471688] [] ? fput+0xd2/0x140 [ 483.476684] [] ? SYSC_connect+0x22a/0x300 [ 483.482461] [] ? SYSC_bind+0x280/0x280 [ 483.488434] [] ? SyS_futex+0x206/0x310 [ 483.493960] [] ? do_futex+0x17c0/0x17c0 [ 483.499566] [] ? SyS_socket+0x121/0x1b0 [ 483.505170] [] ? retint_kernel+0x2d/0x2d [ 483.510874] [] ? move_addr_to_kernel+0x50/0x50 [ 483.517089] [] SyS_sendmmsg+0x35/0x60 [ 483.522538] [] ? __sys_sendmmsg+0x3d0/0x3d0 [ 483.528498] [] do_syscall_64+0x1a6/0x490 [ 483.534203] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 483.541105] [ 483.542717] Allocated by task 4023: [ 483.546329] save_stack_trace+0x16/0x20 [ 483.550282] save_stack+0x43/0xd0 [ 483.553715] kasan_kmalloc+0xc7/0xe0 [ 483.557405] kasan_slab_alloc+0x12/0x20 [ 483.561586] kmem_cache_alloc+0xbe/0x290 [ 483.565628] dst_alloc+0xb5/0x1a0 [ 483.569059] rt_dst_alloc+0x78/0x430 [ 483.572758] __ip_route_output_key_hash+0x9ac/0x23c0 [ 483.577838] tcp_v4_connect+0x111a/0x1c20 [ 483.581964] __inet_stream_connect+0x6e0/0xbf0 [ 483.586525] tcp_sendmsg+0x1d32/0x3040 [ 483.590393] inet_sendmsg+0x203/0x4d0 [ 483.594176] sock_sendmsg+0xcc/0x110 [ 483.597867] SYSC_sendto+0x21c/0x370 [ 483.601555] SyS_sendto+0x40/0x50 [ 483.604985] do_syscall_64+0x1a6/0x490 [ 483.608954] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 483.614047] [ 483.615659] Freed by task 3: [ 483.618658] save_stack_trace+0x16/0x20 [ 483.622608] save_stack+0x43/0xd0 [ 483.626137] kasan_slab_free+0x72/0xc0 [ 483.630030] kmem_cache_free+0xbe/0x310 [ 483.633997] dst_destroy+0x200/0x360 [ 483.637685] dst_destroy_rcu+0x15/0x40 [ 483.641552] rcu_process_callbacks+0x8ae/0x12b0 [ 483.646200] __do_softirq+0x210/0x940 [ 483.649981] [ 483.651587] The buggy address belongs to the object at ffff8801cc3d98c0 [ 483.651587] which belongs to the cache ip_dst_cache of size 216 [ 483.664304] The buggy address is located 24 bytes inside of [ 483.664304] 216-byte region [ffff8801cc3d98c0, ffff8801cc3d9998) [ 483.676129] The buggy address belongs to the page: [ 483.681054] page:ffffea000730f640 count:1 mapcount:0 mapping: (null) index:0xffff8801cc3d9280 [ 483.690591] flags: 0x8000000000000080(slab) [ 483.694896] page dumped because: kasan: bad access detected [ 483.700575] [ 483.702176] Memory state around the buggy address: [ 483.707081] ffff8801cc3d9780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.714503] ffff8801cc3d9800: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 483.721845] >ffff8801cc3d9880: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 483.729485] ^ [ 483.736468] ffff8801cc3d9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 483.744414] ffff8801cc3d9980: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc 19:54:31 executing program 1: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) 19:54:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, &(0x7f0000000040)}) 19:54:31 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x0, 0x3}) setrlimit(0xb, &(0x7f0000000080)={0x0, 0xffffffffffff4771}) r0 = syz_open_pts(0xffffffffffffffff, 0x600) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="644a382102bb69651c9b8293c64734072063ff33ad9713e1eae0fffd86e1ffd70ded0cec8fe40e9da3a015f701a9745c4302166385ca182c18a0f11ec8f5fdc5675eedeef19b9125bdf484afdd5015d65f61499f9ffb0eb104d5e7cdd3631ca48002ff6f59df558b9d2e198d59501fadc4a91bc6cb") r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fcntl$dupfd(r1, 0x406, r1) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x40, 0x1, 0xff, 0xffff, 0x9}) 19:54:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840885eb96a6d5208e8208faad3d6b1ad34939a5b3166ff39dd06705c7f2995c668e3732c64314f8b551dba11e6089394e2452b8a", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)=ANY=[@ANYBLOB="d90000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0000003df100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001482ee3a8dcaa49a000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 19:54:31 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000180)={0x200000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4}) setrlimit(0xe, &(0x7f0000000080)={0x0, 0x100000001}) r1 = memfd_create(&(0x7f00000001c0)='!\'^cpuset#/\x00', 0x0) ioctl$VT_RELDISP(r1, 0x5605) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f00000000c0)=""/31, &(0x7f0000000100)=0x1f) [ 483.751750] ================================================================== [ 483.759099] Disabling lock debugging due to kernel taint [ 483.764826] Kernel panic - not syncing: panic_on_warn set ... [ 483.764826] [ 483.772198] CPU: 1 PID: 9034 Comm: syz-executor0 Tainted: G B 4.9.124-g09eb2ba #31 [ 483.781026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.790375] ffff8801c3db74a0 ffffffff81eb95e9 ffffffff843c828b 00000000ffffffff [ 483.798473] 0000000000000000 0000000000000001 0000000000000040 ffff8801c3db7560 19:54:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x20000, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="003d328629d337e7828c8093de6a3800", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x402000, 0x0) 19:54:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0319ea5f2162c4b206586f0a33f59669d15eb78359e1b1dfba85153b8973e7925c49ebb73215817fc2acbbf2bff8ccd1b6357a39d31ba1b579b0f885a2036279a3ce55145782e161e1eb695626d8191b8b1c04e009cb0b5b9aefe7bd0ff98e9e92a805c711112c2071e3431a0e31ce33ab547ff8df9cfc609d71caeaafa81f60df62c086e75ec67e2b3e19e8977e5178366080467ac18e03b90828b0b55fb5ba721e7683eeeee2480f444d6499e50e8a3f69000f91eb84dbf0f3471f53c7289be5b442b7642fcbfd0e6734e7d609b8ad48978b1dddb4", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000040)}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) 19:54:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0xc6, 0x0, &(0x7f0000000140)="3ff214d65a4aedaf3f09009c2a60fd87bf6b7cb59e7b9590e55d152778cfacaa3cf00828115f9da50726232f5e6926529228021d17da8bfe35a245beed85778fddd51ee16a753cf347ea7ffd396c03a308985ec5b0eb5bae887cbaafdfeb0ad2a25e81cd3491b6bca00d8159db8bf785750689557bbaa74e58405fbea7111c3d164e5d24140f17380dd96f2c1a6d4d906bcfe3ca20e44d3dfcdd5d5c7616c932d8234e73db19af8a3d17339048a7cbd743f6b5ce90bc49d5b32d387ecff004000043a0c5fd2b"}) [ 483.806542] ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6 [ 483.814607] Call Trace: [ 483.817196] [] dump_stack+0xc1/0x128 [ 483.822562] [] panic+0x1bf/0x3bc [ 483.827576] [] ? add_taint.cold.6+0x16/0x16 [ 483.833821] [] kasan_end_report+0x47/0x4f [ 483.839614] [] kasan_report.cold.6+0x76/0x2fe [ 483.845760] [] ? ip6_xmit+0x1838/0x1b80 [ 483.851377] [] __asan_report_load8_noabort+0x14/0x20 [ 483.858117] [] ip6_xmit+0x1838/0x1b80 [ 483.863552] [] ? ip6_finish_output2+0x1d00/0x1d00 [ 483.870046] [] ? mark_held_locks+0xc7/0x130 [ 483.876001] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 483.882827] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 483.889590] [] ? check_preemption_disabled+0x3b/0x170 [ 483.896412] [] inet6_csk_xmit+0x27c/0x4d0 [ 483.902211] [] ? inet6_csk_xmit+0xff/0x4d0 [ 483.908089] [] ? inet6_csk_update_pmtu+0x160/0x160 [ 483.914649] [] ? retint_kernel+0x2d/0x2d [ 483.920538] [] l2tp_xmit_skb+0xc45/0xf30 [ 483.926252] [] pppol2tp_sendmsg+0x4e0/0x790 [ 483.932200] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 483.938669] [] ? pppol2tp_release+0x2e0/0x2e0 [ 483.944790] [] sock_sendmsg+0xcc/0x110 [ 483.950302] [] ___sys_sendmsg+0x47a/0x840 [ 483.956086] [] ? copy_msghdr_from_user+0x560/0x560 [ 483.962666] [] ? trace_hardirqs_on+0x10/0x10 [ 483.968800] [] ? check_preemption_disabled+0x3b/0x170 [ 483.975648] [] ? __fget+0x20a/0x3b0 [ 483.980906] [] ? __fget+0x231/0x3b0 [ 483.986182] [] ? __fget+0x47/0x3b0 [ 483.991461] [] ? __fget_light+0x169/0x1f0 [ 483.997328] [] ? __fdget+0x18/0x20 [ 484.002515] [] __sys_sendmmsg+0x161/0x3d0 [ 484.008300] [] ? SyS_sendmsg+0x50/0x50 [ 484.013834] [] ? ip6_datagram_connect+0x3a/0x50 [ 484.020149] [] ? inet_dgram_connect+0x11e/0x200 [ 484.026459] [] ? fput+0xd2/0x140 [ 484.031464] [] ? SYSC_connect+0x22a/0x300 [ 484.037250] [] ? SYSC_bind+0x280/0x280 [ 484.042788] [] ? SyS_futex+0x206/0x310 [ 484.048315] [] ? do_futex+0x17c0/0x17c0 [ 484.053927] [] ? SyS_socket+0x121/0x1b0 [ 484.059553] [] ? retint_kernel+0x2d/0x2d [ 484.065271] [] ? move_addr_to_kernel+0x50/0x50 [ 484.071495] [] SyS_sendmmsg+0x35/0x60 [ 484.076941] [] ? __sys_sendmmsg+0x3d0/0x3d0 [ 484.082904] [] do_syscall_64+0x1a6/0x490 [ 484.088608] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 484.095852] Dumping ftrace buffer: [ 484.099379] (ftrace buffer empty) [ 484.103064] Kernel Offset: disabled [ 484.106748] Rebooting in 86400 seconds..