b65261074f926366b35d7f6e98fe03a160cc0bbac68d2a008759a1d2b64c923f81b48651ec8f503fb476bd4128c6a8c5865a0bfb5810f70cc6dafcf633d765977634f6796e594452d75cb93b8f756c184fac498f488433251c8bd1e859e2272df21394e9bb1ab762ef5b04", 0xa7}], 0x6, &(0x7f0000001840)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndinfo={0x20, 0x84, 0x2, {0xff, 0x2, 0x9, 0x16c000000, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x0, 0xe2, 0x7f, r3}}, @init={0x18, 0x84, 0x0, {0x1f, 0x100000000, 0xfffffffffffffffa, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @init={0x18, 0x84, 0x0, {0xfff, 0x3, 0x0, 0x7}}], 0xc0, 0x7d9e236e8c88bdb9}, {&(0x7f0000001900)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000001940)="fbd279b6eb68ff08b60982e5989a1ee328078ae3935a8b", 0x17}, {&(0x7f0000001980)="5240c8d0eb3fc5e4a2431127b3318ad0c46f5026688e451576d528c40e2e28bbdbf91cc836715f8bcb3c6cbc", 0x2c}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="8b5dc2c1a97df60794cfd4fa923e923bc4a8205434b8a72ff789466d566fd9d48b8f515515724be71052b91276f72aa8528e45831f1dbe2be39dcc2c47ef26940311f67793920dad980a5419b3cc0055182d2c96e95e053e3e86686a776c565c63e8db5cb86ba9337ed8e7575326e8ee365cc77c61fea539f929665d02087cb767f7c3b065c2cbf899d2652b7466c408005b06e5d8a7e0125baed4a5b021aa58c13913c0dc198185006a77cc63b4f0c94e24b51c4a4babe3fd8f0cb6dd7d3b6a948d188ff4", 0xc5}], 0x4, &(0x7f0000002c00)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x7, 0x8, 0x582, r4}}], 0x20, 0x4000000}, {&(0x7f0000002c40)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002c80)="4d0b3901be47b68507693c4cac84fbdace243650ed0a3d65810e7d5c9a8501c831e2abac34d66cff86051afbed0cc61b7f3ec3cf4f916750278c769b0c2ff7114c69f680bcd824411346e91d89cf46c39e3d4c91d018fa1371340050e66e17958c267f88ea16344cffaeb68860f878591ea029a35a2b10d14fcf52ddd75e4c63bc0385144dd377e36a977a4eda6dfb888e77bd8cbb221c5e377fe2edbeef2d24cbe18bcd382e94fc75101b0af16b672f6b2913667060fee023be414e0b80", 0xbe}, {&(0x7f0000002d40)="1574179f89ea5d37aef3a9fa8cf285bc81b0fe1701fddc648fda8d02c896a53805affe3a238e3f4ce1ccf27ff0f2bc27ffcb670dc229926cfeb7", 0x3a}, {&(0x7f0000002d80)="d49d816fe1695e887d9d755618b63a1a4f56e8b0c53f86381778e82e", 0x1c}, {&(0x7f0000002dc0)="ae105ec6832c56a62d1958f5fb", 0xd}], 0x4, &(0x7f0000002ec0)=[@authinfo={0x18, 0x84, 0x6, {0x40}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8, 0x1000, 0xffffffff, r5}}, @init={0x18, 0x84, 0x0, {0x22c, 0xffffffff, 0x7f, 0x2}}], 0x50, 0x800}, {&(0x7f0000002f40)=@in6={0xa, 0x4e21, 0x80000000, @local, 0x2}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000002f80)="bc52a2fa89ed7ec43fcd3fce8055aa92d9a5bc0c50a4e40f49054c6edba96920edd25dc40af12a3a3611b3dd07deba562d322704fc7991e4c7c2e9231a4833e3288f6e96c349bc50ab95b6f9e8076ad7a5730bbceb27ca7ab5eea6b3b48faa4d1442883595bbb418a0caa9e06ee48173902c0ccc2d30ef8d35760d0fb16a59522a67c958100236964b82c9f10b6da7247423763a3a91b7f01dac7989fb6185b92502ed4d8004b87fc8310417d9bef27af6303b701805a04d5742b0cee9999d7a0b", 0xc1}, {&(0x7f0000003080)="8135200e8d4b28387b9e6f2efe36aa7a45b285a4984f6753eb82bf6d7910b6e2007d10e1ac91323a205ecad5cebdb86d1cf92221318c60fbfeacb9c70f0ac4ca86fa0f245f1f9d9e0309ae6bd309bc987b46c6a205521429eb0924f15677e3089d20bcde22bb394cbec2", 0x6a}, {&(0x7f0000003100)="7af9dd4cf5085f8735bf696667d633af4bd351a856a4a2b616913b01f2a68046e492f3aa101c3334162d3047c274656034ebc849a74ae7d9ed6d88a1737fd771df241402cee9491416dac4ea5f50e9a3fc561f329d91ed6e58344f5ebdea08ae657d3e6faf8c21f48230bd9b05fa9aaa31a526395292b5cc823c5417fe291c5f5d089c4bbb2846be1413d10a59aee5361e3007d825c7c9e0c4406828e7b572188dafddd4dfbe9dab03a240efb6b9bf85e7e670b9cbeb", 0xb6}], 0x3, &(0x7f0000003380)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x4, 0x8208, 0x3, 0x3, 0x8, 0x14ac, 0xffff, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndrcv={0x30, 0x84, 0x1, {0xc5, 0x401, 0x8, 0x1, 0x4aae, 0xffffffffffffffff, 0x2, 0x6, r8}}], 0x78, 0x40}, {&(0x7f0000003400)=@in6={0xa, 0x4e24, 0xfffffffffffff43c, @rand_addr="2c0037b6aa7b19c405dd9f0db6ed914e"}, 0x1c, &(0x7f0000003740)=[{&(0x7f0000003440)="3e5ee7939d5800d3c91167f481b58bcc3f1142ea5d37c7b3fd3fedd4f1d28239e0d9e2e5bfdf0a76091f74f5adae96db2ee2fb21210170bb0848950b79dcabb356d2b98d14e7f026735b3d", 0x4b}, {&(0x7f00000034c0)="66f94be92f62f50e21963212a1c4875d75364f837f9ca009835e6a2c46248671a5", 0x21}, {&(0x7f0000003500)="b48e92615b0df25d086fdd6d23cb21763ae427f11e21145d3519a05a5d6696620fe606b74b22589a1b64372ccf2d6b6c7d828878df8ac3bb507c829767e1866c8e825962a7ccdaae159ccfb6aae3abc5ee25de5c290bd94e26721a0b4b8b4ae7a4acf0230e8d90551a32594a7ad866c9ee1ca9a83d66396f41927d413e11e7f72a10a551a360344de3dac2db396b3dd3f87e373898eba63510fbd6636398bd1d82fc966b4249e7dfeb2cdfe00674703b67621dfbc9b52155743c32afbd8ae8455620556f6c2b6b8b503290b3", 0xcc}, {&(0x7f0000003600)="5f87225a749325888a84e9227806c712b4da56d9cf0f37e4876e0ec3bfd04b2f6a19373a1bd6ea76f75209ed6f13e74edc325c7080c721096dcf87133c2b64a72fb324475d4cf82973db8495d79ef39861091d1dce9c485bb6ea988d1faf165b883f18664f921b134e39e03cf26f13b19d8c50e5d955bfa8afc623b276e1feec9ab93e58c3", 0x85}, {&(0x7f00000036c0)="f79f00002d5e1067adec61331fc4f50eb8ce2304abd3efe2c3d262d5f24a1c48f98e9948c0a6db921dcc6ceb0f0dda1a17eed04cf4f4a2e4d0d647f1ce26fe61a8329060b53087775a1434eb64ef2bd8cb91592de1f7d0438dc1b103c47562a4b0d3cdd0859684903b3cb9fbe1", 0x6d}], 0x5, 0x0, 0x0, 0x20000001}, {&(0x7f00000037c0)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003a80)=[{&(0x7f0000003800)="f69690483e3b4d18715e41dcc9fbc074cee4c34426fa4778aed9a2d8484c7cefc44f8c0f5d7154776e01ced32a64cb44dc6fa9f4c130c2f13c7bf7d0417e627c36aa185947a351d426b8195540bf7e5561408af4c651ee1e040ef410a4987050baf318fb008aea3526", 0x69}, {&(0x7f0000003880)="2db412c13eb229bf9631392d596837bfebefd34d95579829caa1284b9fb4d0ae1376667d6d24f87f86a19113535241d85344d26e7d61126a51f2a9d81a2115a3b7635ec5c518ee11480f9f55e4ca99d1966b947168b4d57b0f73522faa999b01ad764401470b98dc4d6580f3901470c97afe3dab65786d42b8e73ab2d5115105b7bee22d174a5dfd4d7f57e6623948b792a60c4f0512d637c84e15e6e84be2a3f2c6f0c9453002ce1c37ba8451094ae711d9f697d8317d8062a9f6dee4f0238ab734795cd0", 0xc5}, {&(0x7f0000003980)="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", 0xfc}], 0x3, &(0x7f0000003b40)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x4, 0xa, 0x7, 0xcfb0, 0x3f, 0x100000001, 0x5, r9}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x17}}], 0x68, 0x40000}, {&(0x7f0000003bc0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004d00)=[{&(0x7f0000003c00)="c09037ad90a21a03e3aa52ec28c341ecb9a0445b3cdf00dee2cfaec3bdd6003e35008e9753a52877f8ddc731980c726adc04b1814de1f4c2d0e801baed66f9763153aa249d80747d633e14515fc314637e5ecae46a2724a2a01b4d1a05542d5dc254b79fa369a4ba42af626431bac3e5fd5d0b1d44dbcf6effb96fd00d8f41a9cd63f2e00c1975c42d5ace3fa15010f7ba90259e5c175104dfa824fcba590ab020f14e999de611b9a847d6300bf45f0a861db819933f649cd38e6ee1089ca8ecc2754b69889879336bad61", 0xcb}, {&(0x7f0000003d00)="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", 0x1000}], 0x2}, {&(0x7f0000004d40)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000060c0)=[{&(0x7f0000004d80)="f625d23aa2d7cdd0cdd310a14b1844a431ff2e1b90c28e6dba85ac92b566eb76f277946626d0cf925f9b32cd08ce829c5e10fd7f4691b373d388de531c1d3ea32929bd6f359b8ed6681a921e5924846c67ded600f236bb0e36fe10fdec936322de63af5abc6529872b5dec9aba82fa3e96dba05c7769ceae2a88c30e61b9070899ca7ac756e6daf0b6a1ae4c8e583e7a4ff2a109b1845e8195cebec5fead222f820bdbf6692bed5c4476cbe76b4a36b5e730d0d482b64e5c537b6adf9077c2d55df2dbd2d13cc8a1f44c86b79c087c529f33dfd181b8e75f17520f9e0ac41fa2d6b9e55114f1aaaae61451e81662", 0xee}, {&(0x7f0000004e80)="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", 0x1000}, {&(0x7f0000005e80)="735d01ea64840af6249dd0f0f2176e65419d40060478e3401cbb073f58670cfa7c8b3ad044dc34412d3c012ede2f45093247825dba1bf18b7c622102f71eda05ad36eda4b3bdab9051173725cfcdbd1ffae996c8fc3002288d2e08e1642ec8b2f4cba98dc8d680d3195fdb112ada26ff56a4a9a8f677c7d3f7ef98b3ad16cefed898c6edacba97725001502c23a66bf14394d11b9592f4306f26a79bd75046a397216cfa1bbc26c75c034fcffda668bb4a215ccd24869d66d0b759e35807060e50ce774177c5f983b416712a14eecef4fe0161189f49b4c866808a3a", 0xdc}, {&(0x7f0000005f80)="79c33c462b236a8e49b0fff16e46d533dfc86e8e53b2286c841253e61cb81cf82a3b6f47268a2ca6edbd3092943dc2210cd55ad24efdb10f485765a7323ec9e137a1fcd5022daabefae04ddbfd2d105c891b988f19cfc5f2085c39c92cc492f24a77b762a6b4cabb0041abac7ddee9b6baf2b694d7eecfb698ace157d545edf44a60c306719e8a3e3db2f861a9fe0f2d0fd7c7fb6e5cb79efd1d72ededfa7d4e41e8bd578c876fa1b61d9c", 0xab}, {&(0x7f0000006040)="0790fa97d9ac9901c6bd639fc066a4c302d6eb41dd28aa1a54628ac2c428407fb3c6b91abfc656ea354293066d8c8bc79edd3b5b6f8acb4e0e16c5893aa5a57e7df65553e552869b8cdacd89d955bfa637d26a46ad5b33a17c624e778a9b1e769a63f28171fd313ebf66ef", 0x6b}], 0x5, &(0x7f00000061c0)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x6, 0x8, 0x2d, r10}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}], 0x38, 0x4000000}], 0x9, 0x240488d1)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
sendto$isdn(r1, &(0x7f0000006400)={0xefb, 0xc0000000, "f85cf8c5da357dd149ecb35236e7a1ca0bea81ca5bf8ba37ba110b0aaa9a1297404b90f8cc3a1ea0cc1d3f8680896b1a11a878fb1e183f9e3165450c3e31847d5f57ac560f7bd6e636718021d0d4d8a624db1c7cf0b9cba68d6f4865ba85c34d8f2c6b085cf3e17eb665ed9d33df0418814315e20db422ee52bc4d7bceed1ad3ff4132ff2acfda067965112815fe18c8f1c696acd2751e25726fbc3efb13ee6c18"}, 0xa9, 0x8000, 0x0, 0x0)

03:54:45 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x24000, 0x8)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000180)=""/135, &(0x7f00000000c0)=0x87)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(r0, 0x0, 0x2, 0x0)
tkill(r0, 0x3c)

03:54:45 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x200000)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

03:54:45 executing program 4:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3ff, 0x20500)
setsockopt(r0, 0x4, 0xffffffffffffffad, &(0x7f0000000100)="1efcfae3484c95abbf317120fd6c28c258516f9e69b14f4599543010f16a1d0a695c54727bb7f083e6af07f32bb53aebfaa0b17dfa5f1f33840333060c575e4f6ff887dd891580d1f88ebfba881401b703bb0d263bf6f743dcf928a1adf5183060cd14ddbc58332f94834a0f32b0136c23e500812b717dee74b5d924675343f874feee961611058dfa634f88a0c824f6a010cb2ad9825189bb749d21b91640b8bf4a14e7fe6f0290028eab94", 0xac)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x8)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x90000001}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1a8, r1, 0xc00, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffff3e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf252}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbfc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x79}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x268b85d062b3f74c}, 0x1)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0xef, 0x4)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)
getsockname$unix(r0, &(0x7f0000000380), &(0x7f0000000400)=0x6e)
sendto$inet6(r0, &(0x7f0000000440)="c922d034bea60cea008d29d5c6b848195d82cbcb0ea3c56d5fc3b47a1d6b5fb2b9942b4f55c68aad010ba49468a01ddaeb88a08ecaf00debfb1a99463f08c441f9f1d4f936845fbfd5005e84a56aeb912ea9950f592570a12c0d8ebf508d24300b30bcf06f1fa8df1db518017839afca0e882193d8a03a1bb9ee313ac4a37c7cd48627a14ef9f59a4d9e8ce29237b3a41b6257b41c2da4b0f8358b2109e515c1767c2af4fe9ae34ce2ffdacad746014bacbf3aa5b82a0de50f0132b17c32b8b39bde93fb4e76d3050bf874bcd5299a1c15ee58cc03ee", 0xd6, 0x48040, &(0x7f0000000540)={0xa, 0x4e20, 0xe0000000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r3, 0xc074510c, &(0x7f00000000c0))

03:54:45 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$P9_RGETLOCK(r1, &(0x7f0000000180)={0x2a, 0x37, 0x2, {0x1, 0x40, 0x5, r0, 0xc, '/dev/video#\x00'}}, 0x2a)
syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x40040)

03:54:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000100)=0x81, &(0x7f0000000140)=0x4)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x103000, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:54:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

03:54:45 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
read$alg(r1, &(0x7f0000000180)=""/30, 0xfd57)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r2, 0x4004510d, 0x0)

03:54:45 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f00000000c0))
pipe2(&(0x7f0000000000), 0x80800)
getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000080)=""/53, &(0x7f0000000100)=0x35)

03:54:45 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:54:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

03:54:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x6}, 0x2)

03:54:45 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x1, 0x5, 0x80000001})
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000100)=""/205)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f00000000c0))

03:54:45 executing program 1:
r0 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000001180)="9fce94b482b309cb38efdce3b7f72d457d4fd79aac54e3f2876221a2df4b9c625932e66cff838870a5e3230b40a0ecb74db165e22edfa64cab27136e06", 0x3d, 0x0)
add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="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", 0x1000, r0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x17)
socket$unix(0x1, 0x7, 0x0)

03:54:45 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000, 0x0)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

03:54:46 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$P9_RGETLOCK(r1, &(0x7f0000000180)={0x2a, 0x37, 0x2, {0x1, 0x40, 0x5, r0, 0xc, '/dev/video#\x00'}}, 0x2a)

03:54:46 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2200, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=<r2=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000340)={{0x3, 0x0, 0xffff, 0x1, 'syz1\x00', 0x9bfd}, 0x4, 0x230, 0x1, r2, 0x6, 0x1, 'syz1\x00', &(0x7f0000000280)=['wlan0ppp0[[N(\x00', 'mime_type%!\x00', 'aea\xfe\xff\xff\xff\x00', '/dev/vcs\x00', 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00', 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'], 0x87, [], [0x8, 0x4, 0x10001, 0x2]})
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000140)={<r3=>0x0, 0x4a}, &(0x7f0000000180)=0x8)
write$P9_RLERRORu(r1, &(0x7f0000000200)={0x15, 0x7, 0x1, {{0x8, 'aea\xfe\xff\xff\xff\x00'}, 0x8}}, 0x15)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x4}, 0x8)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40)

03:54:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

03:54:46 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080))
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x30)

03:54:46 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000))
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:46 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f00000000c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0)

03:54:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

03:54:46 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(fcrypt)\x00'}, 0x58)

03:54:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

03:54:46 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f0000000080))
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x401)

03:54:46 executing program 0:
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=<r0=>0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0xdf70cf141af34727, 0xffffffffffffffff)
syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5ec, 0x40240)
write$apparmor_exec(r1, &(0x7f0000000100)={'exec ', '$\x00'}, 0x7)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000000c0)={0x3})
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r2, 0x4004510d, 0x0)
ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000000))

03:54:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

03:54:47 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)={0x0, @aes256})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0xfffffffffffffff9)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4)
write$cgroup_int(r1, &(0x7f0000000140)=0x101, 0x12)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x8, 0x0, 0x6}}}, 0x18)
ioctl$KDGKBLED(r1, 0x4004510d, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1)

03:54:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

03:54:47 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

03:54:47 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x18000, 0x0)
fcntl$setstatus(r0, 0x4, 0x42c00)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x460100, 0x0)
ioctl$KDGKBLED(r1, 0xc074510c, &(0x7f00000000c0))

03:54:47 executing program 1:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84800, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1e2}}, 0x383)
tkill(r0, 0x17)

03:54:47 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
r1 = open(&(0x7f0000004b40)='./file0\x00', 0x80, 0x20)
ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000004b80)=0x1f)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r4 = socket$inet(0x2, 0x3, 0x2)
ioctl$SIOCRSGCAUSE(r4, 0x89e0, 0x0)
pkey_alloc(0x0, 0x3)
sendmmsg$nfc_llcp(r2, &(0x7f00000049c0)=[{&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x9, 0x7, "8cd764c4a0909c424c0a78cef3f85f0c5e4ea0a105c86b14ff459e814c8e6194422977b178d899a7970af3dfd709b67e9d81662626c4c7f1b65de04518f296", 0x3a}, 0x60, &(0x7f0000001640)=[{&(0x7f0000000140)="759db3235ee634c5797452e920d487afa747f24f19c07d393f97a3446fadecb8ba34b8f10b483918eb02e43f4820cd9f668b799825f90b811c0e1175d16cf04a9d0cd142994b9effc119da3b3d2aceed8beffb1c086972c2578ceb6eaf3643bdef6f8fb76ea40d411972555ac9b3dd93845bb180666c8a2ea2d5f63f0de5b5c70c5ad6cd98b001c0a776c298d1e778e1f28e4fe407526dd297e32df5dd618f10fb968a5f89b05bd7c60442e52f86ea7762caacdb4df56deb3b6449503c3a362a2436e19c94e3238bd9859e8b3eb572957ea20b4129b0c5a8ef3c987f557529", 0xdf}, {&(0x7f0000000240)="02924b3328c471fc793d77e566dcd9c31e6b3cbf3dcf22ad1a66e003e0d14b7bc90434346824a511275830d12e67ca69cf70c6569bde41241d26", 0x3a}, {&(0x7f0000000280)="f544cd8b1b7b7fc6bbd3949ca78ed40cfb42b86ca403d9249d9128cca9fcc53ce9a065803ef4912918c520fee322fd8f56151fa0ac8cddf9b858f001f5b0e1c86b44c8717c4fb1b03d2b7d5bcc3e286bf7ed755fc6480e95f20d191c44c2230d2adb97034c353b3289c441c02cbdd761f1c4764dfd917bf52ae0160d60f7760cad574b4a29295da19eca2413add3adb3cac1adecad2ab5e8c079fedfa30775", 0x9f}, {&(0x7f0000000340)="c95e1a2448981712a06bb59ff21f7b02d906a0d7bedec7d853311294636805d1753d45c197c0e5e2931146b1ef1ada6b65e7899f464b8c4adb64", 0x3a}, {&(0x7f0000000380)="36836ef2b0fd09ce207502e2d9a82a9db9f34edf862ee6c00ccde946a1c39a7ddba635be622f7c25a53c7f46ec893ba0cb3e76905cecb0bda93e6c4b6d364e26de00db1ac22323a05b8bc4b8ed939ab3221c2eb95716fcacf61dff40a1c0ffbbdc05f4c943ff92c1a2732dabda21ca38906fb336188b3cccebf0d4cfc1ca7a2a", 0x80}, {&(0x7f0000000400)="a5676a0f812681f5f258656590c374b55430284540bc4e98d5b79298ae21fffd95b9e649307ab743bb514a8bc663989d536752939b20f82bb693c3e4166aa23951645b5237f70233cf58a956e40913d2ec49c487af763aed09df789b55ba2cd5d9a79e51d87e863d9beb02f90c445b94205a44982f6a57c81089efa741001571f6c5703afb1e12908dc093fa7bf7994e1acefef277ba5bd94b3216e261c7de29307c1b110a4be65287d1e0790d135a4941008bdf41ce957818c642fe641acf787923a720d9821b3ae689e41cb402b8c3fa85ffe360707e38df1ece977b846e98f8bd8b4b64d19b2f2698d2922d22a76ec33909562e9fe4974bd17ba7692dd53c3e52930a0287be857177509f872624de984a6a44341fb8aac19c552aa27963d9369224ba6f58826e96b9d98f2805371e9e4146c443e8d3a844b0022b5332a8610fcfb70443d94c758682d1eb4f0d57189917ad69e829051c4f131bcc640fe4abd5387f00b9393b7bad359d4ffc467ea322d7381a46025f9d4afce27806ba9ca6de4984a239ce357cdcbd5c9c5a0cc1c35ea4ef2623bc97117030c70989f23262ac35f3468a8fccfb4400d20802dccab730d053d9efd22439849a6543e212e4d08687c1239f27b028895e7832193e86355f03c3ee6b65cdf69e5a1a64523870aa73f78fcd03d572601287496b516ed34e1f26a44b5731bae2d0ea33506dd35865d1f3b52ffb6a1e2b84d40c1b72a8a366982b0351b441f40af2a7c5767e87013ea1bc6d0ba0bfe370975537084dbfa81d304c8fd1b08c58c20f57b8956c2ef900619ed40767b6167e82667a3abcc3e6df799a0b83ef34ae1b3650fdfbcd7539fd8004272f8f691ff875b579ac90d8c439dbfe7ebfbc07d110333fce4b71fb44145c09206894fe451aee9587a9db9e57ef0e31dd20c231f9eb0f9fa27307fd461228b9f7271e25ef666a1987ac129cc41fac71bca2bdc57cd5dabd9c27c22eb1a35ece212b57750fc024869372883da7052acb1ff18df7f0c0b17806b9322eaf7cfbd03dbe0c7ef55ab73255955ceb868b7872ea06875eafbd92286aaa332f9803ca3a37ae973e8441b3b1634064c81c99665cd3f7fd90e236f1c6d3713642201c89404bdcd3cf7bdb93d7c37a78364afbc4a09fce7b1ef8c28f66edb28cbb57a0dabb97f4a24cbb7f5be2e9e5b7139cbd396bf402a74b4d6150fd0ee468920024320da50e0baeb91f9287ef8522f254d248ea485b4e4813e094cadf1c26f3b1fbcc00b8ed183e7668c90ccff750a91ae356a2cd645167a68acaf1c0dbdb84ff67bec53521f90ea77f6ee18bf1815f16df29d522df5124423f7a85e5ecbbf7489a572b7175dcf841290b770d986e40d1d37b96e8682eb6125abc07fe9a2c24e3854eae6d58bfc273cc7e0e1561c5f3f20d21ebf7617ba48f668a7f3bde888e4d32c06bb97595545af3be65306c87fde7c8d41d142780bb7709db19f545534998a320277f731eaeb96c9569f9ecb0bc78801f4c2fb741a0c51a35ae3c15b2e9e0bef3536ea3a3ed7e0a49d9d23e20600977c67e07ef265c2e8c6a8e3257b90f796eb0ef9bef6cc676d1355d19808c0bf89850355e5a4f00b9acc658fd6d0c2330f68eb5f6e81b31b9ab36cbd22cdbce11e1475bd1697a710186bf82a23b254aa97c812aaa341a67e629f0452c7d9ec1647901ca492555a72addd06bdd5967bb5d96e45104b248701cb7f4f43275c480302398d6ea2d7dae097469dac37e94b3552edd9cff7d6774d101ef44b0da398413f1b72cce308ab8ad836c20821c5e0b061bc7181216866a0af97f122b4e7b4cadf9a37d0e763a112a35b05a8df39b38a14597f5496b9d907b9c8f6f8b7d83fa4ec26e40190c6a0e6f6be59b232b1b5f3973515d0b3c3637fb7d4c8a44980138745930dd59f50253ab1132b483056db963d3b2fe2d9e2dab9ee23ececf961fd6a9dfca83e699804ffd689809ce4fc3ad2882d99c113229cbdc4d8389d276a4571ff5972e84710613f44812237d5fe8336feb9dde5074b536f05c68a867594fc207e3e8752d527f68c93627fe2a940f9ee69686a7d955d30fc6bc65c0f0ff4bbc8da5812dac52fa5c51b081d4105869767bfc2351c4036cf316d38138d21427ae96abd1aa0050e50dfe9cf3b01f8c5f38ebd2b6ec4dc73f31381b64f712047c75eb30f0e9f7633ac9aa857f65fee745c3e7052414f3eb6f7b3b36acbdf3fb336c0c1ddc805e7722b0ea38a38d09b8a266809d71dc98d8cfdedbed79fbfde81f0d6d5a5e49be86e0c59d85fc8769cc264e6b35c5e952ef495c466a7663200a03548137f1c625ae5aa4b479fb331422dfb879ca0749f6054839bc92d292f57f0c3c2e48ce085453d3efe511fbc09f855f8515124805d1285f851d3d21e4629ebff2aa356aa4ce76d0e4c25beb9a002069c830b8d383649918f63aff94407fb7a0083737cbe40129558dbb8d15622efd237cb21c5b7716c784b307877b5401eb277a58c358f5ba3f746d79d6552373f75ed12a17d57cde1bb7cb37efe21f2dbe4ec3b1ed9dff11a26e6a0f0987415179bfd90bcf81f59b40d457809f79b1dac36776e67fdb0f42709979efa410703c87af899be9b9dbfdc5ecf4b1da7c5468423db65837c93f0d23917c61470efc175cf425283473715f45f1ebbf1c9828d5e419d3480eb2d4608d017491f7c40356bc43a49a182d3a32c33ed54143e887b1971c2d7be80a21566113b7a4a22ef5bd10df45af80a5da448a8bce6c319c4058a0bed4de46f0a2fbd37b0b9650f2a5eacf5723c55c349842fb226ec60029ba3120f613a8fa3cb91de5e9165ed30863904365c88a10d3dd172af531db3f17e7d9d2544271494adfe91ddb78fc19abf9b3e91e9666f5a2a869707564cae27ebd7dc2b965b4138d02ce5e8380025eee0cb43d5d355938947754e5b2352774c978419c354d7f8cfc2e48959c250701738a0a4439e3720ad0a012ae64af4c71dde384643546346c93ba2ce3d3ea90a58a9ce1c77b28890e2316064d54ca98c63f200094d1df55191e6ad4990e9c703f82960f1aa800d86d23a5bfd0083caa3eb5b7ff8a294fc177998cb25573290ee5d1f24053fd9dcbecc5a3fa253fefa51e9d2bdedd1e4c9f0ec964612450295469b9060c7fef2909a43042914530c2750cb412b0ed24d95bb72359469da0d6e8c2343ddd11d870ddb04432be651ea6a83165fde29c7f931158192731ea1ada43d600b66d38576a54ba4e1c0748a2f8b61efe0d9773dbc9ccd19a701f3a5438c0b67d7fdee68bea1d8796f19ce754be80979e6ec35445956c251d96a0aa736ec23cd7f8756419e869da0412f6cd49a4ad8355757532bf91a6cbff8be0871cde85a29450dae235605e09e872d5e3af0ada72c5b85b308a2d16260e35b975b764d31f08909ac06ddcaed70fb9aba8f08e3beaf15c5977918f80b47d66165849f8e1bbaef23eae13c4397b5396529e4925038a3a3a357d0a55d4942cd2c68ca2a136b31bb587d2034681137f28aa52100f46ec918eeb26533838bc7891cf92b9c2ba390f0bcef492bff288f2551c8572e11ad14ae6d4fa3f5459e7d19b94d21cc348d727220dc1e12f14b6335db2bdb8870ce01658572c0d36b0455c4af082543849a8c3e8ddef97a1260169dd6b42a81b39e971ae9fd5fa34e55941b4d686fdb39188fa2fb1281dd0a5400334c195dc4eadda24b0cacaa68b31b4baed2fd14545be587d095e94c92687487469fb55ece6c0045f11139447ea73eb0cb7d15964b168c87f79f6b865e465ab9d631b6babded89d98492dcf0dec69ab05584f47cef890ae74fba1935a0399505590147b089669be9e335674f54831cd367f792589daca8e271b02b0a69364f8aa32201b563a6776d41b4958b15960a07d54c2b9ef804fc883a1a993262ca55c623861d8cf63006ff10f95f74354368b15a5ab90ae80c7ecc48b39d2970a411e8bccc0d4c1c2e2e50305002b0e813edd1b948202e60df0c6e623d8475516dae087ee8f2145c945fdbb74d502c9f259495bb07a0b1991de6d264ec07745d7e5298c0019f52ca6e5f685dccb31bc2e28bf68341fdb702025ad9091e92234fb4580d0c136d2c9fc63bc66157c3a5d96f722b894a3508dac9d3d833ef89f7f65720adca99e2617e449073643ce3c4dd20982413e0e8ed96d1ab0950dae46b876c76dbefb2599ec7b7ce523ea2e612501cf99db351731598d38fe0e78158cd55352193f0b622930634d8f47824b8ddebcba732e63a8d77f295a70066edbb6356030705929fdb3472a6b4025dc183b22a6e122c27890abd0b01eaf6230bda9bc7dcf89226744f4b5b20b0126f90844276b9e6df151586275f875fd9a8ad703728f94be06c6e692122df98255d2492b7f8ed25372578148e3ff0355088a6867c1bb7b4b9f7835eded33632853fb48ffcc9fbfb7c520d235b9757d0c19939dad61d0e55b1c1af1d8637d003c06e8bdf658e440a2cac1448a0b12a427a4430414dc839761ff23d64c6cc7950eec2213f2d364bfb3beb32f9bd9a86d4336e86ceb0cf3120cb702d3eadd87473e615fd754d1e92a815aedcc6bdeaad4f9ef827ef787ac494302d78b03171a92980f220d5d76493e5ed01165c7da982ccd093d3bb171436757d649cf53b658c6f2b9343ee8a39f0b35c8a971cbacd8d9df3bc76f733fbcf736b3d7f399413a6ebce3b8a4b2f1ed4a05089c8ccdcf7f41321c28aaaed78c64499f116cae9ddd6e4919e3e3895cd32f1213c97fd51361f57c23ff656f5724ea348cd33050abe46ff4649e82acbbf84690f14a08e46eb42027b48dcddf090dbd4a8385f594f79b5b801119bfab2f9fae01ef9f1dd8e55343e75fde2f130d33c5c8905ae2895350105f9c7a45cd0635cdf2117a2fefdd4a35bc5cac9a59cab88e4bb4d8a95c41bf9ef31f0219291a35b27b41d6dd440b0235d8d04b810c50176afb4290c0966742663a0e6bbddc8e7fcf02d7a62819afb55816d608c18cc3e8541b076f377cac23a06210d87a88837bc6a895e5d8a8c1d0085b00677bf65f6a0cc930ed425d4628bdfdc96a2894740e56d36cca084d277a397d35f9447a0643078a116bc5bc311c0f89b568b6886b91ff92ad48e9ebd8f74d75b7f59a19e98c43893b107dc6007ea11a593c3a88163847adad1d7f0100ca94d12422473e298b8269f7353fbd9779b54620bcd2f44ba87aaf9cdbe86a8d6d99f50be91d323bc45eb5c7d6313005dfd698b9a90aafa2e087372011a2c58857a519ea04e2078981816d6a46671c23407388b7a5ac66f88a6f536c870e63d2bfcbb886bdaf7af9ff91cf9633ae41c10b3e3bc18e42daf091b935bc871bcba80c6a0b7d13809a6025e0ce26aef294e045c34438e9fb94f1829c13ce370a11251967d64a7cc3867c96877eab69cfb530090f69bbd8bc4ddf89eb67b7fc5921071b22ac804762b041be5259aaf7cd2067b913489f4256bbc344a2d89b7633a0555de919c7f01927ccd3e9d5db7c9b9f449fe907aaf5de3eb8f5c20b33acdc299fd95ddde1c9af79450d6ffa84a1b6c13b6f86778ac9d5392b74918b0584030e3dd9acd26fca6ba980aff21ac108898548fcb7b2d9ef737a056bd6717e46ac4591fa5bf9981f1961d38d15130b50624eaaf84b0ab76cb19d00cf1273b7722ad5d1436727168485b674b6d5f2d9611b06fe2d40ddd14669de1aa800816eb40b949405f39e1af1a14f0db659498f9e116e1bb96c0685c3e186d02d17f148559dd0de150120f1d343c64d7fce51", 0x1000}, {&(0x7f0000001400)="4cd0c30c87d964a5debc2e12c95589addab865e2e0b53de40d644a852ef87792c0646e5531183d24f02f10c02affd3107dd5bfcfea5160cf19a4185faa47d2f3dfc4f6c0faf141799da2937c7fbab4255d704cfaea6f25ec3da8c5bef2f9760a23525cd627470a5e24879ce1dbc58cefdd3c74ecbb70cf44db7d32ffa2f7ca41352a4c62613a2553d73b8041a063abf4617d9572", 0x94}, {&(0x7f00000014c0)="085c0749f51282fb0dadc33315b536d2a82f9a1b3ac3308b5162183ec9702cffaadb2983380aa8f62fc24f868a88e4e879d05fef6571cec2cca97398234bc7ef78a5a3795dc858a0e411736a9eac4724a0443094ed795b31649ac5c1d2560a67cb6a08519a8238b072c111529eb9c69d3a3b50bd", 0x74}, {&(0x7f0000001540)="f9db660b9c7c934488df9fdd4dfea8fc04ca6fe6f7a0a36ef717d49e1d7f41b513423bccce79d34498d7841510dfe6d8f267f0c2990408d34cf5c09c412b2ee252e318f92bcd0b76b5c8f5342a1127e88a6a556680b6b6c22c72cbc7942c76ef5397113e7409566fa9bb9fe3daf68bd292ad57964fbd8bfec78a081f1f0b9b192a6a979314662952544d1faa24551d1dff4a3801679d1c6485b2c151c95528bf5e25ac862110f77ee54cee3d0916bf64e64c8dd29fb5533a0138d64fba0e3e8eac056d9bfc58fa534f92fa805109277a584814a52a4afd3b", 0xd8}], 0x9, &(0x7f0000001700)={0x88, 0x88, 0x1, "0bcf6436cc608674d146a7f9cabd800e9211cb89c2bb05cc3a1ac452f4638543047979b53e4b54aef125b0ac9cf4ffda944b794dd9ae67f947dece6c5d07985e74d996bb941047258bf8670ee0c7815ef539d4ff97261fa7b22d01283c76c24606c4b9f6dc1612423f6a9216a6769eb4dc06b2a66f"}, 0x88, 0x1}, {&(0x7f00000017c0)={0x27, 0x0, 0x0, 0x7, 0x7fffffff, 0x3, "e310821766390febcde12f207ec9526e0d0a2e8d530e576acbf2efb226a310d2425cbb85fb510c4150c35b8610bb4f9fc98177095d495802dd0ad48a1ee5db", 0x17}, 0x60, &(0x7f0000001940)=[{&(0x7f0000001840)="b6094f5d0608d0e130bafd5e931fa626cd7ac2f16cd26fb9c5aa1799f271449771c7068c6cd71bb2a9a921849a097490208f0b09d8841b20984d5b82f7896d962f4f72246d492425d5ca8e015e9eb81cb39e57977e6e699d7272b797413d52530a72a5a6260d41180bc91286dde0345477b97972c24045614720c78fdf67639027f94daf39d8ae37d498a47d7f94165263ff13a56b1082dda950589af72f4ebc71d122efef6b7a054c1a5becce620b7ad7f4958e783730bde1cafa67ebbb6c17affb908adce8c6d4d31b1b6e0d5be08e7d704bacaba45225045a5a5e", 0xdc}], 0x1, &(0x7f0000001980)=ANY=[@ANYBLOB="d80000000000000019010000010000003b3cb21339b41c8af0b287aba236dbbfec12b4b802bd7ceeae80aab86ef9ab5ad8bf4959edad86fbd514ea7730736774442026b0e86dc5d1f1d0df0e6b1da7bb2d4733fe782406003a1c2f4ccbfdc738cbb91903805563cd2aa6cb6ebed1a8f23703afbcf9c143e6ea5db1b3194e91c0d1238854ad30b29c05a77e11d6b67e439dbdb4d37ca6d064855d81b52bf2b624db2e49533e66a825bd61723c80c054f359eb51519b6d2fca42be9fa49c5ef23c4d1259bbcbe8c54388b0bf425f0f5d72f5caa60000000000"], 0xd8, 0x1}, {&(0x7f0000001a80)={0x27, 0x1, 0x1, 0x7, 0xffffffff, 0x3, "da13cadcfcb8c653ab0cda97d5114a246e23cee8036253224206010a0c00cda2a0b7e56d0e2bfd22005f530c9ca7a6b9728a33d7b2d6752db6335b53923549", 0x1a}, 0x60, &(0x7f0000002cc0)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="217cdbf7715a3ed1ed90c22da63b0eb28bb17edb15906576bea68403290f83f2b55e7fa998ab18761724d04ef30741b47defab4194cd44b01d3ebd07d46b6b360aa6aae1e98fb6dc8a5afc7c057efee869adafc5d0b8acf1f3ea106110f134c4", 0x60}, {&(0x7f0000002b80)="150301ff0d6d26daaf543e5ea8424405c61186de6ad6ebb0630a9ee1e75d843af73ac3f71d16869d37a6e4f86aebddfbb831d9490daba0e07b498fb8f0b844bf2799055bd6d6585b7cbb1c25340a614d", 0x50}, {&(0x7f0000002c00)="47477a5f6c845fbd03a731791517f15bfe280af0ec910f481e5ec0fcdf41ca96a430db3034c19cf11742f71fd37ea7e7a11be9fa77e1bad31540288560d771efe947f415b50e82f029b0eaeec49111ab6448f1f8d58126d9fa094a47a04f3790db460c3a0fc877abe0e08f2c013c1c25dd530aad7106852c6e63d60fc2819cc40c5d473b60602835b4490c5aff51", 0x8e}], 0x4, 0x0, 0x0, 0x8015}, {&(0x7f0000002d00)={0x27, 0x0, 0x0, 0x7, 0x68, 0x4, "d970cd77f53dc84a5e593d3d573c760a147425a1fe44fec631304c64fba2777171a9197311bb7aef1447d1f5f5dc3f3ec5c2cfd0e58990c55b24b8b0f01d73", 0x2a}, 0x60, &(0x7f0000003140)=[{&(0x7f0000002d80)="47d9bcdfaa5342abf5db269784f4dc0276ccc1c56a88ad5cc72ae41ead40371f0b166d5cfe32162fd12d9aa1b67210504f4b1bc2893aa75b4595ab8be806f4de17d81a4aa3362bb0e355f30929404ca3884a05511643c086c5abbc08dce0f47b27149193db75c8d30d989df415f9465a3cc34739cf4408e704ab5eef37f39c8d0b68b816e64695da6d22756f5fc497a5b9165ba6e442909413083384289ad47e30f2421d9c6907998fbd65feb6694f7a2f87d479a8cd461dbd8fc12b2a08cbcb1d509f89fd96d85087f2474430cf8b13d72de999d1434fc491635e05186932673bf30edd8c07284e33736f8ec0f9edfcb07fa5bbadf7eb", 0xf7}, {&(0x7f0000002e80)="e0479a81f91f37da0005207467f55186932ee98c94163a8bdf83f13132ad82e08c89a122d6c35ffb06b9ff2e7fcb724ec81bc49238a20be812268dd87b24db720e16eb462a0008940a435b8f967e319ef12747042b29e978259811317e732a42c27768e643f4d5025f1d427141e991b6984d1825fe523b23f4d25d7119f8ae3ecd5f91061088525b96c6e1b7e623d0ff2240a90a08ddb690c88f88d530dcce82d784f24fed4890a8dbedb78fa7d9860bdeb5aa0295dec97892", 0xb9}, {&(0x7f0000002f40)="454ea5c9cd2d756249300a5b881096ceab99286b00c8b057772fa22c122025c1a33697c253a76c6584d41f312c", 0x2d}, {&(0x7f0000002f80)="f40432b9fcb6963778a8cf611e1ea653a955f104839dcf889dc3524e12e29c54f6d3f4ddbad98f72e9eb3e173fecc5fae5356d47c35b7847e6d25392c8558d06a5584e81258a50d35322285b9d7e2a71d7993e8409420ad8d90a9801c55165539a4af4c0fb9edb466a", 0x69}, {&(0x7f0000003000)="b17dac4473f536b1333e5eb4fc7203a558d0ec54dd734e50d9466c44e9bac197c7caa5f0ce091475d4458e4f440a69a980f20474a0eb2649df83d1a15760d46d1e200188122bb97c8a0a469ee91fb5d1db6bc6b4851332c18c00c43ef2769296f9f13078166d854214bb959f7dbcf35a0b6e071d0053e743bee227bcbd86f3519558549eb6b044875a37bb4de582975a43f866bb9c11580d31b26c040b3eeb7bd8117d08fe080c653d24506ab5a99b117fbb87aeed391356033a061e03cc4b26c7bab0e272b363b609e5e15a3d063cdda13d829d4a6c27b48bf32b045bbdff3d2b9998dcca37bbad873ef4823b8e153738298653c00b0cad", 0xf8}, {&(0x7f0000003100)="f8d58a893dbd7249500a5004d508961fd465a1bdb2fed2f2143ac57bc9df1ccbf2ca37fee22849011e015f53dbda7b69420849b5c850c7f925bb41", 0x3b}], 0x6, &(0x7f00000031c0)=ANY=[@ANYBLOB="e00000000000000002010000010000000ecb80987c5d345fcacafca260f4deb179b0970644c9aaa4d20f72c8d298db69ed9d4427b056f539f4e70833c778f2b33b637161a8231d902ce094f1b9e0e72d68c32feb6910df2116ae91b4a24fe937440fe18a18760f3bc286af66c80442c42a9b136097986a9330912302594c9ce6c6688fa125e28414ea1ae827e5497e212ea3d4e8cdfd9b1f647fba3c588adf334efec7ff26d4e22f7b5cf759afd97aef2c78a3028de0fcf0b7631d756d2b0af03455df7d30a9b20f904be253d8bc28d89b20"], 0xe0, 0x8000}, {&(0x7f00000032c0)={0x27, 0x1, 0x2, 0x7, 0x5, 0x3ff, "78652a4ebc6530a453467b39d0bef9c5611f9c72b1d18a51b8cc356165cb8c3d59d33a1034e05459a65c5dbe238d3df5fde902860ce5cb77f0ab55417ab776", 0x1e}, 0x60, &(0x7f0000003580)=[{&(0x7f0000003340)="7b761df8631e7b259e5a6260d932dc800c3cf7703874f04097197dffab19ff21677b033a710ea32be4df6ceeccb07f54ab", 0x31}, {&(0x7f0000003380)="315662f4d0de32e0b79807b89267c628a5b087a4a23cd92c9cabf1e820e4d6", 0x1f}, {&(0x7f00000033c0)="355ad6435fbd2c8cfc3e0bc0227a9b3a0721db223a764764829b372cef612dc8fb64edc4f5c73ef6ac0096ed622edcb4882a16c61c6fefdd8e6b69bc0812ca510156a5084fa056d03d3af387b637a48ff2460ffc815a3b21621844715c9832505dc06fc55cf55fd1921add32fd68b65aad894a7b67dc7ccdcffadbcba7d82b5b94483b5ac80f2b15856cb5d06145eff20f76d59e0657784f71f8e90907d51ab4f55143e3aea03aac7442da", 0xab}, {&(0x7f0000003480)="aba4e8411a78bcaf08b57de772d352ae923be56d7591d5326ea4b375fc6a71573b027093a08cf72e795bb105653126a70c81816bfd7cbbd6db69f4a60401bf6614185e96bc49d0e51c1b0a6960b68557548644795e822306947bcc0797b1987910ace37a69b8cd77333cc7bec5bb27ea7edeff31bdee82234116fc1a06cb5c818430224801d48a5e57df1c8e84abd87d160399d1a837f4bf43d7aa8bfe6c9d8d8c67a25063cddd86fede2bb9d512eb35f1e0e87c26434b80223b4836fa73ecb88f8b00363a5ff1d599615f7317cdea61852bc7d8933aafbcbbfafd", 0xdb}], 0x4, 0x0, 0x0, 0xd0}, {&(0x7f00000035c0)={0x27, 0x0, 0x1, 0x5, 0x80000001, 0x8, "65ba6f0ca9e6578952eb93bc84b706f9614d71becb032a42863ce03834724a05edb6f8c749a268d00a7f0239c444914b3650e7fa32548c377f3f435b2e0fa9", 0x3b}, 0x60, &(0x7f0000004880)=[{&(0x7f0000003640)="1c0531fb0c4dea218a1c8a8d3e484c85df7dafe976d0abe3d4c1e3fd3871fbd9448f21d1ed01ed7a93e7b87991325e2e3ac8f599f9220ae3112adc4ed3c16aa8e533ea8dd7e724f22634b541f65f97aef64bd37d2d9ea83b0e8163916b35bfca6fd42d6039c1c17993c28a0912fb1d377af88c8770f802c49e60b993e5a5d77f63ead41a808bf0eefa30272fcb4562f56079fcc7150e56dd9fafaa9e9949656734b5fe2644bcd4d95ac0b54c", 0xac}, {&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004700)="fee50eefec9edb2f8653d79e7b27ea8769", 0x11}, {&(0x7f0000004740)="6550965c6641f6ba879da430f5f5713e2d965de3e2cb106fe131474555fdcc53b15fb1dc100f708050ef8d7b8976ea2bcd8cbedc02ef3d7168156289d03edb5301401d66ad6523c97f337979678e731938813c68775e49ba10ba65d034e2607213f2a86ed525fb26ea8eaee531e0e04362049672f9e89ede8c", 0x79}, {&(0x7f00000047c0)="a9308ab18dbe17363e8a1b1e70a448928ba0d3efa0033e8fc4d91ee3241b93bca987c22fa8ed1ce44b5ee889c9a0e5d494f9e525c725a19f26c9133d94922563b74a30beb58d123ae9e3255e400be20435c6e053d403cab25cb078c288cb1dead894ff472bf2b8c5882436fe0ad61239e016f1506892efb167a6b8754a36124f7363d84fdd409cbbaa132e2cc8c7c51cad8b830340e39aa173e3bbf42e2c50243b", 0xa1}], 0x5, &(0x7f0000004900)={0x88, 0x111, 0x13d, "f94a412d368d41e50403605a944ee3a9ae37183420fbbbe01c9ab95327d624093ca66d3ba60fdaea0df4b216c971328f3be285b5eab25322db00228f6e4965f5f1309dd6907379ab88b16218a7c1e5d5554e7bf4f1cd291e65d5b9236d3666e0e4e1bc4f66bcd4a448ae7ee6a503db814012c6b0ed35"}, 0x88}], 0x6, 0x10)

03:54:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

03:54:47 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)

03:54:47 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r1, 0x4004510d, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0xd02}, 0x4)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000100)=<r2=>0x0)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=r2)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)=0x3000)

03:54:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

03:54:47 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x10000019b)

03:54:47 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f0000000000))
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000002c0))
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0)

03:54:47 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

03:54:47 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x12000, 0x0)
sendto$x25(r1, &(0x7f0000000140)="a64392c5dd9c5e82e2ed5fedbbb7cd973d3431d69f5e2619067e9e0290a2b55f4173261bcfb87d21177432b0c3595ecb4f952fc844978ae2763f0cdc8d4e5f21dfbed94b2425b2e6ec39c52601f89d814f3ec3ffb3164730f427d980a730dc018142cdebc4abd025cb532bad34ed5521c2646ca116bd6efa2c2532a8a063690b6c95e6605b93957a9e9e209614de5afe75d927839247ab340ade9bcab73a9f5d73609985c3", 0xa5, 0x40, &(0x7f0000000200)={0x9, @remote={[], 0x1}}, 0x12)
ppoll(&(0x7f0000000240)=[{r1, 0x2040}, {r1, 0x2000}], 0x2, &(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f00000002c0)={0x9}, 0x8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="57cf4ec1ac72f2d5e6a0f7a537504eea6c9d661663843154c4e2800f3704a71091709f91ab4aeefcf187f02556bb9721e269964e615fcc38a6c17d8c052054132a8b8299f0b022bc0f51a7da3b51add14865d87c54e9cf85e0e96e7267786d748e3969c296f37fc4c31a53e40049d44295", 0x71)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)

03:54:47 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:47 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x4)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:48 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x1000, "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"}, &(0x7f0000000000)=0x1024)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f00000000c0))
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000001140)={@null='               \x00', 0x9, 'batadv0\x00'})
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)

03:54:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

03:54:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
uselib(&(0x7f00000000c0)='./file0\x00')
socket$pptp(0x18, 0x1, 0x2)
sendto(r0, &(0x7f0000000100)="56543794fe6cb2abece956b3b096a154e4756e39de53d5f5c51fdcdb6faa1613f40d00676a254adc6987f03a6ffbc993472b6a30d7af8afa41b6da64c12d060666a2afb98e7d00eb056407a058d2fcbc780aecbc0bfdab51caf3ec9f8a016bf126e7843f6a1deb80d536abea67f762e31222a09261f3fee2abdb24bf8c7eaf207eaff4a11c88dabc8fdc30b0760757c5", 0x90, 0x10, &(0x7f00000001c0)=@un=@file={0x0, './file0\x00'}, 0x80)

03:54:48 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:48 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@bcast, @bcast, @rose, @bcast, @remote, @netrom, @netrom, @null]}, &(0x7f0000000000)=0x48, 0x800)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x2d)

03:54:48 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x8000, @loopback, 0x10001}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @empty}], 0x3c)

03:54:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

03:54:48 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/115, 0x73}], 0x3, &(0x7f0000001180)=""/137, 0x89}, 0x2}, {{&(0x7f0000001240)=@can, 0x80, &(0x7f00000017c0)=[{&(0x7f00000012c0)=""/180, 0xb4}, {&(0x7f0000001380)=""/182, 0xb6}, {&(0x7f0000001440)=""/219, 0xdb}, {&(0x7f0000001540)=""/154, 0x9a}, {&(0x7f0000001600)=""/255, 0xff}, {&(0x7f0000001700)=""/116, 0x74}, {&(0x7f0000001780)=""/25, 0x19}], 0x7, &(0x7f0000001840)=""/197, 0xc5}, 0x2}, {{&(0x7f0000001940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000019c0)=""/169, 0xa9}, {&(0x7f0000001a80)=""/71, 0x47}, {&(0x7f0000001b00)=""/87, 0x57}], 0x3, &(0x7f0000001bc0)=""/239, 0xef}, 0x20000000000000}, {{&(0x7f0000001cc0)=@sco, 0x80, &(0x7f0000003040)=[{&(0x7f0000001d40)=""/103, 0x67}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/232, 0xe8}, {&(0x7f0000002ec0)=""/53, 0x35}, {&(0x7f0000002f00)=""/188, 0xbc}, {&(0x7f0000002fc0)=""/106, 0x6a}], 0x6, &(0x7f00000030c0)=""/255, 0xff}, 0x8}, {{&(0x7f00000031c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000003240)=""/104, 0x68}, {&(0x7f00000032c0)}, {&(0x7f0000003300)=""/2, 0x2}], 0x3, &(0x7f0000003380)=""/226, 0xe2}, 0x8}], 0x5, 0x40010022, &(0x7f00000035c0)={0x77359400})
recvmmsg(r0, &(0x7f0000005ec0)=[{{&(0x7f0000003640)=@can, 0x80, &(0x7f00000032c0)=[{&(0x7f00000036c0)=""/237, 0xed}, {&(0x7f00000037c0)=""/187, 0xbb}, {&(0x7f0000003880)=""/86, 0x56}], 0x3, &(0x7f0000003900)=""/21, 0x15}, 0x1}, {{&(0x7f0000003940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003b40)=[{&(0x7f00000039c0)=""/253, 0xfd}, {&(0x7f0000003ac0)=""/86, 0x56}], 0x2, &(0x7f0000003b80)=""/156, 0x9c}, 0x79}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003cc0)=""/68, 0x44}], 0x1, &(0x7f0000003d80)=""/231, 0xe7}, 0x1}, {{&(0x7f0000003e80)=@x25, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003f00)=""/54, 0x36}, {&(0x7f0000003f40)=""/219, 0xdb}, {&(0x7f0000004040)=""/116, 0x74}, {&(0x7f00000040c0)=""/7, 0x7}, {&(0x7f0000004100)=""/2, 0x2}, {&(0x7f0000004140)=""/99, 0x63}, {&(0x7f00000041c0)=""/66, 0x42}, {&(0x7f0000004240)=""/227, 0xe3}, {&(0x7f0000004340)=""/94, 0x5e}], 0x9, &(0x7f0000004480)=""/189, 0xbd}, 0x400}, {{&(0x7f0000004540)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000004900)=[{&(0x7f00000045c0)=""/246, 0xf6}, {&(0x7f00000046c0)=""/146, 0x92}, {&(0x7f0000004780)=""/182, 0xb6}, {&(0x7f0000004840)=""/163, 0xa3}], 0x4}, 0x7}, {{&(0x7f0000004940)=@sco, 0x80, &(0x7f0000005d80)=[{&(0x7f00000049c0)=""/25, 0x19}, {&(0x7f0000004a00)=""/223, 0xdf}, {&(0x7f0000004b00)=""/104, 0x68}, {&(0x7f0000004b80)=""/196, 0xc4}, {&(0x7f0000004c80)=""/103, 0x67}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/107, 0x6b}], 0x7, &(0x7f0000005e00)=""/138, 0x8a}, 0x5}], 0x6, 0x2, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000003600)={0x8, 0x100000000, 0x7, 0x800}, 0x10)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r1, 0x4004510d, 0x0)
setxattr(&(0x7f0000006040)='./file0\x00', &(0x7f0000006080)=@known='system.posix_acl_access\x00', &(0x7f00000060c0)='/dev/sequencer2\x00', 0x10, 0x1)

03:54:48 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
syz_extract_tcp_res(&(0x7f0000000180), 0x60, 0xffff)

03:54:48 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f00000000c0))
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x8000, 0x105, 0x4, 0x2}})

03:54:48 executing program 3:
r0 = gettid()
capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

03:54:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x8000, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0xc24, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa79b}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x10)

03:54:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

03:54:48 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)
sched_setscheduler(r0, 0x7, &(0x7f0000000000)=0x9)

03:54:48 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0)
ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080))
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

03:54:48 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000000)={0x0, 0x100000})
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f00000000c0))

03:54:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x15, 0x80005, 0x0)
getsockopt(r1, 0x114, 0x2718, 0x0, &(0x7f000033bffc))
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)

03:54:48 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

03:54:48 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)
getrandom(&(0x7f0000000000), 0x0, 0x3)

03:54:48 executing program 3:
gettid()
capset(0x0, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:49 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2)
ioctl$TCFLSH(r0, 0x540b, 0x4)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r1, 0xc074510c, &(0x7f00000000c0))
ioctl$CAPI_INSTALLED(r1, 0x80024322)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7, 0x5, 0x2, 0xfff, 0x10000, 0x4, 0xbd}, 0x1c)

03:54:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8)
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x40)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/72)
write$P9_RRENAME(r1, &(0x7f00000001c0)={0x7, 0x15, 0x1}, 0x7)

03:54:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

03:54:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

03:54:49 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={<r3=>0x0, 0x3}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x3, 0x100}, 0x8)
sendmsg$nl_netfilter(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x150, 0x10, 0x8, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x9}, [@nested={0x13c, 0x95, [@typed={0x8, 0x96, @u32=0x7}, @typed={0x8, 0x7, @fd=r2}, @generic="a722f466958ce095bfa9622160ea11820292f274d0ea8b89e9b77a2b62d50a29ba790b726981c99209fcbe66d2adf1a1446f733459c1e9f658a17d05425e2922d1a0a5bc9ab50ceea1e5df84fb0bb845d4791b42c6f9ec9520e7e2b667e91633eaacc9be0d68805968debdd03b0f87ca35b46b6110a5dbc70adff35131fa2b93002f063fa19747c05186bbef76dd9d626ccd0396a67f2e31add97730ad5b452a239478177074a01eb52c25c607a6677f8cfb8de4f8532e51dfcce177c4bec1987fb6e2dbe208066a07130dac478ba6f4ee80cb730b7395b67411cbf8cb1c5a61", @generic="72efb3fccc6b55c5fca64036425e0a4722eb56a115890ce6a8553dcf1f9e2eee1fa225714c14fac1ebc9b828e544370ffc2dc5", @generic="a9bd2984", @typed={0x10, 0x5f, @str='/dev/rfkill\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:54:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x4, 0x1, 0x0, 0xe, 0x100000001, 0x4}, 0x20)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r4=>0x0, @dev, @multicast2}, &(0x7f0000000180)=0xc)
syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x8, 0x98000)
sendto(r0, &(0x7f0000000440)="97af7f531b6baf99f2270774cbf5db4447", 0x11, 0x4000004, &(0x7f00000001c0)=@ll={0x11, 0x1a, r4, 0x1, 0x106f, 0x6, @random="6dfdcb70483d"}, 0x80)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xf, @sdr={0x35435753, 0x6}})
fcntl$notify(r3, 0x402, 0x10)
splice(r1, &(0x7f0000000240), r1, &(0x7f0000000280), 0x7, 0x2)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58)

03:54:49 executing program 3:
gettid()
capset(0x0, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:49 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:49 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)="8b1b90ae53b7dc8787e98241d2f8aa3db72e88dc600c533f4295592d92f2af45522688eff72a71e10a48f2216acd7b05a652849d3c9f9fcae6346b5502ad459647a9ef764825618b24b2a1c050871eea243ebf1a1ea8169e35eac5e9730ff245276456406b7f390106b190a4ce31572d7bb2c9c8ddfbf0f0ff0ab513cc5b2b7a45d3358870222797091f81b95b1115d75fd364e99a4dd032071d34b5454328cc094c1ed07c57faabee1c3da99fc62b09583cbe286a0a", 0xb6, r0}, 0x68)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f00000000c0))

03:54:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

03:54:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

03:54:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x3e)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x80010000, 0x20001)
accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x1c)

03:54:49 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0)
read(r0, &(0x7f0000000200)=""/252, 0xfc)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x2f, @local, 0x4e23, 0x4, 'lc\x00', 0x16, 0x3f, 0x1b}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000180)={{0xfb, @rand_addr=0x8, 0x4e22, 0x2, 'nq\x00', 0x7, 0x12000, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x80, 0x1, 0x4e5c}}, 0x44)
ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f0000000300))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x6e, 0x2, 0x2d, 0x3, 0x0, 0x100000001, 0xc0000, 0x3, 0x3, 0x5, 0x1f, 0x5a249660, 0x7, 0x0, 0x6, 0x8, 0x3, 0x401, 0x5, 0x0, 0x6, 0x8, 0x5, 0xc0, 0x7, 0x3f, 0x400, 0x5, 0xffff, 0x2, 0x5, 0x61, 0x10001, 0x3, 0x6, 0x6, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x201, 0x7, 0x2, 0x4, 0x200, 0x1, 0xffff}, r0, 0x2, r0, 0x2)

03:54:49 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

03:54:49 executing program 3:
gettid()
capset(0x0, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)

03:54:52 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4200, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x8a40, 0x0)
dup3(r2, r1, 0x80000)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8)
r5 = getuid()
setreuid(r4, r5)
syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7ff, 0x82000)
r6 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0xa00)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4001fe)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r7, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:54:52 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:52 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

03:54:52 executing program 3:
r0 = gettid()
capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:52 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x15, {{0xa, 0x4e23, 0x100000001, @mcast1, 0x5}}}, 0x88)
r2 = request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='vboxnet0Nnodev\x00', 0xfffffffffffffff8)
r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
connect(r0, &(0x7f00000002c0)=@nl=@unspec, 0x80)
keyctl$link(0x8, r2, r3)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aea\xfe\xff\xff\xff\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)

03:54:52 executing program 4:
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100))
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80)
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080))
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000500)={0x2, {{0xa, 0x4e24, 0x0, @loopback, 0xffffffffffff7f75}}}, 0x88)
syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8, 0x10000)
ioctl$KDGKBLED(r1, 0xc074510c, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={<r2=>0x0, @in6={{0xa, 0x4e24, 0x6, @local, 0x7fffffff}}, [0x2, 0x2, 0x8, 0x654, 0xffff, 0x9265, 0x4, 0x8, 0x2, 0x0, 0x6, 0x1, 0x101, 0x10001, 0x5]}, &(0x7f0000000200)=0x100)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)={@broadcast, @remote, 0x1, 0x7, [@dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast]}, 0x2c)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x88e5, 0x200, 0x5, 0x3, r2}, &(0x7f00000005c0)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000480)={r2, 0x3}, &(0x7f00000004c0)=0x8)
open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x84000)

03:54:52 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

03:54:52 executing program 3:
r0 = gettid()
capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:52 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

03:54:52 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
mkdir(&(0x7f0000001540)='./file0\x00', 0x0)

03:54:52 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x12000, 0x0)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:52 executing program 4:

03:54:53 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x1002})
tkill(r0, 0x17)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1f, 0x400000)

03:54:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:54:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

03:54:53 executing program 3:
r0 = gettid()
capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:53 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x3, 'syz0\x00'})
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:53 executing program 4:
r0 = open(&(0x7f0000000140)='.\x00', 0x143042, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffe5b)
gettid()
ptrace$peekuser(0x3, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xffffffffffffff41)
write$P9_RRENAMEAT(r0, 0x0, 0x475c3efd8138c559)

03:54:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

03:54:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:54:53 executing program 3:
gettid()
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

03:54:53 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
munlockall()
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)

03:54:53 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x7fff})

[ 1513.551265][T20266] bridge0: port 1(bridge_slave_0) entered disabled state
03:54:53 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x1, 0x9a, "621a6f0478ab99084599a0fb9d52133ca5d28921aa4d7af0edd9130774f943a65f5a89c683d9e3eb68fd756128c3ff7bc92a344a562049ba43806657e59ed6e36c4074f3860a2175e9d4401b4f0401646cdf87ee085bd8d3890aa1f36b9cf4058730573737ca284406c5c9c8251829bfc0eb6864fd579938dd32c6afef9ca3f72126c60c7947874214e95f9eb41c2438defba3910844f173f60e"})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40000004)

03:54:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

03:54:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:54:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

03:54:54 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:54:54 executing program 3:
gettid()
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:54 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2)

03:54:54 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
munlockall()
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)

03:54:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

03:54:54 executing program 0:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
ioctl$int_out(r0, 0x5462, &(0x7f0000000100))
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x3e, 0x7, 0x22})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = fcntl$getown(r0, 0x9)
fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x2, r2})
ioctl$KDGKBLED(r1, 0x4004510d, 0x0)

03:54:54 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2)

03:54:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

03:54:54 executing program 1:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200800, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x133, 0x5, 0x0, {0x0, 0x1000000000000005, 0x8, 0x3}}, 0x30)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={<r2=>0x0, 0x7fffffff}, &(0x7f0000000300)=0x8)
syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x1, 0x2)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r2, 0x3, 0xfffffffffffffffd, 0x6, 0x10000, 0x6fe7}, &(0x7f0000000380)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
recvfrom$ax25(r0, &(0x7f0000000200)=""/61, 0x3d, 0x1, &(0x7f0000000240)={{0x3, @default}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
recvfrom$ax25(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x10000, &(0x7f0000000180)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
fcntl$getownex(r3, 0x10, &(0x7f0000000400))
tkill(r1, 0x17)

03:54:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

03:54:54 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2)

03:54:54 executing program 3:
gettid()
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x9, 0x7, 0x8, 0x1f, 0x3, 0x9})

03:54:54 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x842, 0x0)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:54 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
munlockall()
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)

03:54:54 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

03:54:54 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x4004510d, 0x0)

03:54:55 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

03:54:55 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
munlockall()
ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)

03:54:55 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000180), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
bind$x25(r2, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x101000)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x100000000)
tkill(r0, 0x17)

03:54:55 executing program 3:
r0 = gettid()
capset(&(0x7f0000000000)={0x20080522, r0}, 0x0)

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

03:54:55 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79, 0x0, [0xfffffffffffffffd]})

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

03:54:55 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000005c0))

03:54:55 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:55 executing program 4:

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

03:54:55 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x100000000, 0xfffffffffffffffc)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:54:55 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

03:54:55 executing program 4:

03:54:55 executing program 0:

03:54:55 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:55 executing program 3:

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

03:54:55 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x14500, 0x0)
fcntl$dupfd(r0, 0x406, r1)
r2 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)

03:54:55 executing program 4:

03:54:55 executing program 2:
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

03:54:55 executing program 2:
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:55 executing program 0:

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

03:54:55 executing program 3:

03:54:55 executing program 2:
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:54:55 executing program 4:

03:54:55 executing program 0:

03:54:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

03:54:58 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0xa01, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={<r1=>0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x40000, 0xffff, 0x3f, 0x1}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x8000, 0x8, 0x7fff, 0x100, 0x3870, 0xfb2e, 0x7ff, r1}, &(0x7f0000000280)=0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r2=>0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)='$em0cpuset\x00'}, 0x30)
ptrace(0x11, r2)
r3 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x17)

03:54:58 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:54:58 executing program 3:

03:54:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

03:54:58 executing program 0:

03:54:58 executing program 4:

03:54:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

03:54:58 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:54:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

03:54:58 executing program 3:

03:54:58 executing program 0:

03:54:58 executing program 4:

03:55:01 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000000000010000)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:55:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

03:55:01 executing program 0:

03:55:01 executing program 3:

03:55:01 executing program 4:

03:55:01 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:55:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

03:55:01 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:55:01 executing program 4:

03:55:01 executing program 0:

03:55:01 executing program 3:

03:55:02 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ptrace$setopts(0x420a, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x22)

03:55:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

03:55:02 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:55:02 executing program 4:

03:55:02 executing program 3:

03:55:02 executing program 0:

03:55:02 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(0x0, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:55:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

03:55:02 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
mkdir(&(0x7f0000001540)='./file0\x00', 0x0)

03:55:02 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:02 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)

03:55:02 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(0x0, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:55:02 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='schedstat\x00')
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0x80, 0x6}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

03:55:03 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(0x0, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:55:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

03:55:03 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:03 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:55:03 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

03:55:03 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561b, &(0x7f0000000080))

03:55:03 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:55:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

03:55:03 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1523.057462][T22235] binder_alloc: binder_alloc_mmap_handler: 22234 20001000-20004000 already mapped failed -16
[ 1523.078949][T22245] binder: BINDER_SET_CONTEXT_MGR already set
[ 1523.112819][T22245] binder: 22234:22245 ioctl 40046207 0 returned -16
[ 1523.131596][T22235] binder_alloc: 22234: binder_alloc_buf, no vma
[ 1523.140352][T22235] binder: 22234:22235 transaction failed 29189/-3, size 24-8 line 3035
[ 1523.149150][T22248] binder: 22234:22248 BC_INCREFS_DONE u0000000000000000 no match
[ 1523.157737][T22245] binder: 22234:22245 Release 1 refcount change on invalid ref 1 ret -22
[ 1523.168516][T22235] binder: 22234:22235 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1523.178287][ T3180] binder: release 22234:22242 transaction 3 out, still active
[ 1523.193168][ T3180] binder: send failed reply for transaction 3, target dead
03:55:06 executing program 1:
clone(0xc300800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x6, 0x480)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={<r3=>0x0, 0x8, 0xffff, 0x4, 0x3, 0x3, 0x5, 0x3, {0x0, @in={{0x2, 0x4e22, @empty}}, 0xfff, 0x0, 0x6, 0x7, 0x7}}, &(0x7f0000000240)=0xb0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x1, @loopback}}, 0x0, 0x101, 0x8001, 0x9, 0x11}, 0x98)
getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2)

03:55:06 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84800, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1e2}}, 0x383)
tkill(r0, 0x17)

03:55:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

03:55:06 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:06 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:55:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

03:55:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

03:55:06 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2)

[ 1525.841785][T20266] binder: release 22252:22270 transaction 8 out, still active
03:55:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

03:55:06 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:06 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1525.958235][T20266] binder: send failed reply for transaction 8, target dead
[ 1526.156411][T20266] binder: release 22293:22299 transaction 12 out, still active
[ 1526.181839][ T3180] binder: send failed reply for transaction 12, target dead
03:55:06 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84800, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1e2}}, 0x383)
tkill(r0, 0x17)

03:55:06 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2)

03:55:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

03:55:06 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:06 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x8000)
ioctl$NBD_DO_IT(r2, 0xab03)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

03:55:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2)

03:55:06 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1526.646336][T20266] binder: release 22306:22320 transaction 16 out, still active
03:55:07 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1526.710151][ T3180] binder: send failed reply for transaction 16, target dead
03:55:07 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2)

03:55:07 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1526.899034][ T3180] binder: release 22329:22340 transaction 20 out, still active
[ 1526.929155][ T3180] binder: send failed reply for transaction 20, target dead
03:55:07 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84800, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1e2}}, 0x383)
tkill(r0, 0x17)

03:55:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

03:55:07 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:07 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)

03:55:07 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:07 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2, [0x7ff, 0xfe0000000]}})

03:55:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

03:55:07 executing program 2:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:07 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

03:55:07 executing program 2:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

03:55:08 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84800, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1e2}}, 0x383)

03:55:08 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

03:55:08 executing program 2:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:08 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)

[ 1528.251830][ T3180] binder: release 22348:22360 transaction 24 out, still active
[ 1528.270598][T20266] binder: send failed reply for transaction 24, target dead
[ 1529.150513][T20266] binder: release 22400:22409 transaction 28 out, still active
[ 1529.169371][ T3180] binder: send failed reply for transaction 28, target dead
03:55:10 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0xf766fc7a3b526fc9, &(0x7f0000000080))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x200000, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x3f, 0xdb58, 0x0, 0x6, 0x0, 0xc3, 0x10, 0x8, 0x80000001, 0x456f, 0x9, 0x40, 0x2, 0x3f, 0x2, 0x3, 0x100000001, 0x8, 0x2, 0x1de5, 0x5, 0x47de, 0x3, 0x1f, 0x3, 0x4, 0x9, 0x6, 0x16, 0x0, 0x4, 0x80, 0x400, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x38083d174ea2ef45}, 0x8000, 0x4, 0x0, 0xf, 0x3ff, 0x6, 0x3}, r0, 0x0, r1, 0x8)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

03:55:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

03:55:10 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:10 executing program 2:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:10 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)

03:55:10 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84800, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1e2}}, 0x383)

03:55:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

03:55:10 executing program 2:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:11 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

03:55:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

03:55:11 executing program 2:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
setsockopt$sock_int(r0, 0x1, 0x37, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1531.433703][T20266] binder: release 22423:22434 transaction 32 out, still active
[ 1531.441805][ T3180] binder: send failed reply for transaction 32, target dead
03:55:11 executing program 1:
clone(0x2859ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = semget$private(0x0, 0x3, 0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000480)=0xc)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000004c0)={{0x0, r2, r3, r4, r5, 0x10, 0x40}, 0x3ff, 0x6a50, 0x80000001})
r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000080)={0x7f, 0x8, 0x1f, 'queue1\x00', 0x7f})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:11 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)

03:55:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

03:55:11 executing program 2 (fault-call:4 fault-nth:0):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:11 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84800, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1e2}}, 0x383)

03:55:11 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

[ 1531.537835][T22468] FAULT_INJECTION: forcing a failure.
[ 1531.537835][T22468] name failslab, interval 1, probability 0, space 0, times 0
[ 1531.579970][T22468] CPU: 1 PID: 22468 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1531.589047][T22468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1531.599107][T22468] Call Trace:
[ 1531.602416][T22468]  dump_stack+0x1db/0x2d0
[ 1531.606763][T22468]  ? dump_stack_print_info.cold+0x20/0x20
[ 1531.613011][T22468]  should_fail.cold+0xa/0x14
[ 1531.617620][T22468]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1531.623452][T22468]  ? ___might_sleep+0x1e7/0x310
[ 1531.628320][T22468]  ? arch_local_save_flags+0x50/0x50
[ 1531.633614][T22468]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1531.639867][T22468]  __should_failslab+0x121/0x190
[ 1531.639906][T22468]  should_failslab+0x9/0x14
[ 1531.649418][T22468]  __kmalloc+0x2dc/0x740
[ 1531.653667][T22468]  ? perf_trace_lock+0x750/0x750
[ 1531.653755][T22468]  ? kernfs_fop_write+0x33d/0x480
[ 1531.653776][T22468]  kernfs_fop_write+0x33d/0x480
[ 1531.668553][T22468]  __vfs_write+0x116/0xb40
[ 1531.672981][T22468]  ? check_preemption_disabled+0x48/0x290
[ 1531.678719][T22468]  ? kernfs_fop_open+0x1030/0x1030
[ 1531.683838][T22468]  ? kernel_read+0x120/0x120
[ 1531.688437][T22468]  ? __lock_is_held+0xb6/0x140
[ 1531.691682][T22485] binder: 22470:22485 transaction failed 29189/-22, size 24-8 line 2896
[ 1531.693218][T22468]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1531.693237][T22468]  ? rcu_sync_lockdep_assert+0x73/0xb0
[ 1531.693253][T22468]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1531.693281][T22468]  ? __sb_start_write+0x1ac/0x360
03:55:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

03:55:12 executing program 1:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000)
write$P9_RREAD(r0, &(0x7f0000000080)={0xbf, 0x75, 0x2, {0xb4, "3c681ff92215101434d33c6614a7cf041bedaf0082610e860121d4e9a7951e4abc40cb34c09388851b35da6387d489c196c087a57cb8c53864c2a8e1990708a6aadbc46ad0caea3d3115dc822abad846afb53ba52edb958de67b61422adc4aa1ac2de8e5824c8a8e15e926fb8b370d77ba391cf205964cb1a638685ac316249e4e93844da425900376db2c14fa9aa54bb3b30b9bdb3e79fd05a9478ba23af91b7e88f97a5eb3332288c924f9ca2ea48080167be3"}}, 0xbf)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x17)

[ 1531.713020][T22485] binder: 22470:22485 BC_INCREFS_DONE u0000000000000000 no match
[ 1531.718965][T22468]  vfs_write+0x20c/0x580
[ 1531.718991][T22468]  ksys_write+0x105/0x260
[ 1531.719038][T22468]  ? __ia32_sys_read+0xb0/0xb0
[ 1531.725025][T22485] binder: 22470:22485 Release 1 refcount change on invalid ref 1 ret -22
[ 1531.731749][T22468]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1531.731770][T22468]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1531.731792][T22468]  __x64_sys_write+0x73/0xb0
[ 1531.731812][T22468]  do_syscall_64+0x1a3/0x800
03:55:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

[ 1531.737051][T22485] binder: 22470:22485 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1531.740369][T22468]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1531.740390][T22468]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1531.740412][T22468]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1531.740441][T22468]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1531.787362][T22468] RIP: 0033:0x458099
[ 1531.798585][T22468] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:55:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

03:55:12 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)

03:55:12 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

[ 1531.798596][T22468] RSP: 002b:00007fc6815d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1531.798612][T22468] RAX: ffffffffffffffda RBX: 00007fc6815d6c90 RCX: 0000000000458099
[ 1531.798622][T22468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 1531.798633][T22468] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1531.798643][T22468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6815d76d4
[ 1531.798653][T22468] R13: 00000000004c73db R14: 00000000004dcce8 R15: 0000000000000006
03:55:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

03:55:12 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x10)

03:55:12 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)

03:55:12 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x84800, 0x0)
tkill(r0, 0x17)

03:55:12 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

03:55:12 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x2b)

[ 1532.523295][ T3180] binder: release 22523:22531 transaction 38 out, still active
[ 1532.546054][ T3180] binder: send failed reply for transaction 38, target dead
03:55:15 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x1, r0})
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)
ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000))
fcntl$setflags(r1, 0x2, 0x1)

03:55:15 executing program 0 (fault-call:1 fault-nth:0):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

03:55:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x2d)

03:55:15 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:15 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
rt_sigpending(&(0x7f00000001c0), 0x8)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x30)

03:55:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

[ 1534.826622][T22545] FAULT_INJECTION: forcing a failure.
[ 1534.826622][T22545] name failslab, interval 1, probability 0, space 0, times 0
03:55:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

03:55:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x2b00)

[ 1534.868199][ T3180] binder: release 22536:22554 transaction 42 out, still active
[ 1534.930322][ T3180] binder: send failed reply for transaction 42, target dead
[ 1534.939261][T22545] CPU: 1 PID: 22545 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1534.948302][T22545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1534.958346][T22545] Call Trace:
[ 1534.961627][T22545]  dump_stack+0x1db/0x2d0
[ 1534.965953][T22545]  ? dump_stack_print_info.cold+0x20/0x20
[ 1534.971670][T22545]  should_fail.cold+0xa/0x14
[ 1534.976252][T22545]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1534.982054][T22545]  ? ___might_sleep+0x1e7/0x310
[ 1534.986894][T22545]  ? arch_local_save_flags+0x50/0x50
[ 1534.992173][T22545]  __should_failslab+0x121/0x190
[ 1534.997097][T22545]  should_failslab+0x9/0x14
[ 1535.001584][T22545]  kmem_cache_alloc+0x2be/0x710
[ 1535.006419][T22545]  ? wait_for_completion+0x810/0x810
[ 1535.011696][T22545]  getname_flags+0xd6/0x5b0
[ 1535.016189][T22545]  getname+0x1a/0x20
[ 1535.020070][T22545]  do_sys_open+0x3a5/0x7c0
[ 1535.024479][T22545]  ? filp_open+0x80/0x80
[ 1535.028707][T22545]  ? __ia32_sys_read+0xb0/0xb0
[ 1535.033458][T22545]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1535.039510][T22545]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1535.045304][T22545]  __x64_sys_openat+0x9d/0x100
[ 1535.050057][T22545]  do_syscall_64+0x1a3/0x800
[ 1535.054635][T22545]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1535.060253][T22545]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1535.065964][T22545]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1535.071500][T22545]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1535.077388][T22545] RIP: 0033:0x458099
[ 1535.081268][T22545] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1535.100853][T22545] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1535.109245][T22545] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1535.117212][T22545] RDX: 000000000000275a RSI: 0000000020000100 RDI: 0000000000000003
03:55:15 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:15 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0xa402)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080)=0x49, 0x4)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x801a)

03:55:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x2d00)

[ 1535.125165][T22545] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1535.133121][T22545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
[ 1535.141079][T22545] R13: 00000000004c408f R14: 00000000004d72a0 R15: 0000000000000004
03:55:15 executing program 0 (fault-call:1 fault-nth:1):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x3000)

03:55:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

03:55:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

[ 1535.344082][T22589] FAULT_INJECTION: forcing a failure.
[ 1535.344082][T22589] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1535.357335][T22589] CPU: 1 PID: 22589 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1535.366362][T22589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1535.376415][T22589] Call Trace:
[ 1535.379706][T22589]  dump_stack+0x1db/0x2d0
[ 1535.384056][T22589]  ? dump_stack_print_info.cold+0x20/0x20
[ 1535.389785][T22589]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 1535.395426][T22589]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1535.401688][T22589]  should_fail.cold+0xa/0x14
[ 1535.406295][T22589]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1535.412115][T22589]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1535.418351][T22589]  ? check_preemption_disabled+0x48/0x290
[ 1535.424056][T22589]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1535.430275][T22589]  ? check_preemption_disabled+0x48/0x290
[ 1535.435995][T22589]  ? check_preemption_disabled+0x48/0x290
[ 1535.441712][T22589]  ? debug_smp_processor_id+0x1c/0x20
[ 1535.447075][T22589]  ? perf_trace_lock+0x12f/0x750
[ 1535.452003][T22589]  ? perf_trace_lock_acquire+0x138/0x7d0
[ 1535.457624][T22589]  should_fail_alloc_page+0x50/0x60
[ 1535.462806][T22589]  __alloc_pages_nodemask+0x323/0xdc0
[ 1535.468181][T22589]  ? __alloc_pages_slowpath+0x2c60/0x2c60
[ 1535.473908][T22589]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1535.480152][T22589]  ? ___might_sleep+0x1e7/0x310
[ 1535.485005][T22589]  ? trace_hardirqs_off+0xb8/0x310
[ 1535.490111][T22589]  cache_grow_begin+0x9c/0x8c0
[ 1535.494860][T22589]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1535.501104][T22589]  kmem_cache_alloc+0x645/0x710
[ 1535.505938][T22589]  ? wait_for_completion+0x810/0x810
[ 1535.511306][T22589]  getname_flags+0xd6/0x5b0
[ 1535.515796][T22589]  getname+0x1a/0x20
[ 1535.519679][T22589]  do_sys_open+0x3a5/0x7c0
[ 1535.524104][T22589]  ? filp_open+0x80/0x80
[ 1535.528339][T22589]  ? __ia32_sys_read+0xb0/0xb0
[ 1535.533093][T22589]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1535.539142][T22589]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1535.544946][T22589]  __x64_sys_openat+0x9d/0x100
[ 1535.549804][T22589]  do_syscall_64+0x1a3/0x800
[ 1535.554393][T22589]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1535.560104][T22589]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1535.565814][T22589]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1535.571364][T22589]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1535.577254][T22589] RIP: 0033:0x458099
[ 1535.581139][T22589] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1535.600732][T22589] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1535.609120][T22589] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1535.617411][T22589] RDX: 000000000000275a RSI: 0000000020000100 RDI: 0000000000000003
[ 1535.625361][T22589] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1535.633327][T22589] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
03:55:15 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:15 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x100000)

03:55:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

03:55:15 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

03:55:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x2b000000)

[ 1535.641292][T22589] R13: 00000000004c408f R14: 00000000004d72a0 R15: 0000000000000004
03:55:16 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

03:55:16 executing program 0 (fault-call:1 fault-nth:2):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x2d000000)

03:55:16 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
tkill(r0, 0x17)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x5a1a00, 0x0)
syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

03:55:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x30000000)

[ 1536.043068][ T3180] binder: release 22576:22588 transaction 46 out, still active
[ 1536.057127][T20266] binder: send failed reply for transaction 46, target dead
[ 1536.141294][T22635] FAULT_INJECTION: forcing a failure.
[ 1536.141294][T22635] name failslab, interval 1, probability 0, space 0, times 0
[ 1536.174946][T22635] CPU: 0 PID: 22635 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1536.183993][T22635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1536.194041][T22635] Call Trace:
[ 1536.197320][T22635]  dump_stack+0x1db/0x2d0
[ 1536.201652][T22635]  ? dump_stack_print_info.cold+0x20/0x20
[ 1536.207374][T22635]  ? mark_held_locks+0x100/0x100
[ 1536.212305][T22635]  ? __isolate_free_page+0x680/0x680
[ 1536.217607][T22635]  should_fail.cold+0xa/0x14
[ 1536.222214][T22635]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1536.228043][T22635]  ? ___might_sleep+0x1e7/0x310
[ 1536.232904][T22635]  ? arch_local_save_flags+0x50/0x50
[ 1536.238228][T22635]  __should_failslab+0x121/0x190
[ 1536.243165][T22635]  should_failslab+0x9/0x14
[ 1536.247660][T22635]  kmem_cache_alloc+0x2be/0x710
[ 1536.252490][T22635]  ? __lock_acquire+0x572/0x4a10
[ 1536.257408][T22635]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1536.263651][T22635]  __alloc_file+0x93/0x480
[ 1536.268048][T22635]  ? ____fput+0x20/0x20
[ 1536.272189][T22635]  ? mark_held_locks+0x100/0x100
[ 1536.277124][T22635]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1536.283348][T22635]  ? check_preemption_disabled+0x48/0x290
[ 1536.289136][T22635]  alloc_empty_file+0x72/0x170
[ 1536.293879][T22635]  path_openat+0x112/0x5660
[ 1536.298371][T22635]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1536.304034][T22635]  ? __alloc_fd+0x549/0x700
[ 1536.308521][T22635]  ? find_held_lock+0x35/0x120
[ 1536.313264][T22635]  ? path_lookupat.isra.0+0xba0/0xba0
[ 1536.318615][T22635]  ? do_dup2+0x580/0x580
[ 1536.322843][T22635]  ? kasan_check_read+0x11/0x20
[ 1536.327675][T22635]  ? do_raw_spin_unlock+0xa0/0x330
[ 1536.332764][T22635]  ? do_raw_spin_trylock+0x270/0x270
[ 1536.338028][T22635]  ? __phys_addr_symbol+0x30/0x70
[ 1536.343048][T22635]  do_filp_open+0x26f/0x370
[ 1536.347530][T22635]  ? may_open_dev+0x100/0x100
[ 1536.352184][T22635]  ? exit_files+0xb0/0xb0
[ 1536.356493][T22635]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1536.362728][T22635]  ? digsig_verify.cold+0x32/0x32
[ 1536.367752][T22635]  ? get_unused_fd_flags+0x122/0x1a0
[ 1536.373021][T22635]  ? __alloc_fd+0x700/0x700
[ 1536.377505][T22635]  ? getname_flags+0x277/0x5b0
[ 1536.382253][T22635]  do_sys_open+0x59a/0x7c0
[ 1536.386669][T22635]  ? fput+0x128/0x1a0
[ 1536.390635][T22635]  ? filp_open+0x80/0x80
[ 1536.394862][T22635]  ? __ia32_sys_read+0xb0/0xb0
[ 1536.399610][T22635]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1536.405656][T22635]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1536.411473][T22635]  __x64_sys_openat+0x9d/0x100
[ 1536.416219][T22635]  do_syscall_64+0x1a3/0x800
[ 1536.420795][T22635]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1536.426405][T22635]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1536.432110][T22635]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1536.437641][T22635]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1536.443532][T22635] RIP: 0033:0x458099
[ 1536.447420][T22635] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1536.467021][T22635] RSP: 002b:00007f4200a23c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1536.475409][T22635] RAX: ffffffffffffffda RBX: 00007f4200a23c90 RCX: 0000000000458099
[ 1536.483362][T22635] RDX: 000000000000275a RSI: 0000000020000100 RDI: ffffffffffffffff
[ 1536.491324][T22635] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 1536.499286][T22635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a246d4
[ 1536.507236][T22635] R13: 00000000004c408f R14: 00000000004d72a0 R15: 0000000000000003
03:55:16 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

03:55:16 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x7ffffffff000)

03:55:16 executing program 0 (fault-call:1 fault-nth:3):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1536.651269][T22661] FAULT_INJECTION: forcing a failure.
[ 1536.651269][T22661] name failslab, interval 1, probability 0, space 0, times 0
[ 1536.677085][T22661] CPU: 1 PID: 22661 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1536.686131][T22661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1536.696179][T22661] Call Trace:
[ 1536.699456][T22661]  dump_stack+0x1db/0x2d0
[ 1536.703775][T22661]  ? dump_stack_print_info.cold+0x20/0x20
[ 1536.709514][T22661]  ? __x64_sys_openat+0x9d/0x100
[ 1536.714448][T22661]  ? do_syscall_64+0x1a3/0x800
[ 1536.719196][T22661]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1536.725250][T22661]  should_fail.cold+0xa/0x14
[ 1536.729828][T22661]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1536.735653][T22661]  ? ___might_sleep+0x1e7/0x310
[ 1536.740501][T22661]  ? arch_local_save_flags+0x50/0x50
[ 1536.745784][T22661]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 1536.752021][T22661]  __should_failslab+0x121/0x190
[ 1536.756947][T22661]  should_failslab+0x9/0x14
[ 1536.761454][T22661]  kmem_cache_alloc+0x2be/0x710
[ 1536.766296][T22661]  ? __alloc_file+0x93/0x480
[ 1536.770883][T22661]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1536.776584][T22661]  ? kmem_cache_alloc+0x341/0x710
[ 1536.781647][T22661]  ? __lock_acquire+0x572/0x4a10
[ 1536.786580][T22661]  security_file_alloc+0x39/0x170
[ 1536.791590][T22661]  __alloc_file+0x128/0x480
[ 1536.796125][T22661]  ? ____fput+0x20/0x20
[ 1536.800272][T22661]  ? mark_held_locks+0x100/0x100
[ 1536.805208][T22661]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1536.811443][T22661]  ? check_preemption_disabled+0x48/0x290
[ 1536.817151][T22661]  alloc_empty_file+0x72/0x170
[ 1536.821911][T22661]  path_openat+0x112/0x5660
[ 1536.826395][T22661]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1536.832015][T22661]  ? __alloc_fd+0x549/0x700
[ 1536.836501][T22661]  ? find_held_lock+0x35/0x120
[ 1536.841257][T22661]  ? path_lookupat.isra.0+0xba0/0xba0
[ 1536.846625][T22661]  ? do_dup2+0x580/0x580
[ 1536.850856][T22661]  ? kasan_check_read+0x11/0x20
[ 1536.855714][T22661]  ? do_raw_spin_unlock+0xa0/0x330
[ 1536.860809][T22661]  ? do_raw_spin_trylock+0x270/0x270
[ 1536.866091][T22661]  ? __phys_addr_symbol+0x30/0x70
[ 1536.871116][T22661]  do_filp_open+0x26f/0x370
[ 1536.875640][T22661]  ? may_open_dev+0x100/0x100
[ 1536.880295][T22661]  ? exit_files+0xb0/0xb0
[ 1536.884605][T22661]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1536.890835][T22661]  ? digsig_verify.cold+0x32/0x32
[ 1536.895853][T22661]  ? __alloc_fd+0x700/0x700
[ 1536.900345][T22661]  ? getname_flags+0x277/0x5b0
[ 1536.905110][T22661]  do_sys_open+0x59a/0x7c0
[ 1536.909533][T22661]  ? filp_open+0x80/0x80
[ 1536.913770][T22661]  ? __ia32_sys_read+0xb0/0xb0
[ 1536.918527][T22661]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1536.924584][T22661]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1536.930371][T22661]  __x64_sys_openat+0x9d/0x100
[ 1536.935117][T22661]  do_syscall_64+0x1a3/0x800
[ 1536.939730][T22661]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1536.945364][T22661]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1536.951068][T22661]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1536.956600][T22661]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1536.962478][T22661] RIP: 0033:0x458099
[ 1536.966361][T22661] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1536.985947][T22661] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1536.994342][T22661] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1537.002298][T22661] RDX: 000000000000275a RSI: 0000000020000100 RDI: 0000000000000003
[ 1537.010249][T22661] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1537.018201][T22661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
[ 1537.026153][T22661] R13: 00000000004c408f R14: 00000000004d72a0 R15: 0000000000000004
03:55:17 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

03:55:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x10000000000000)

03:55:17 executing program 0 (fault-call:1 fault-nth:4):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:17 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90080, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f00000001c0)=0x4, 0x4)
clone(0x800000, &(0x7f0000000200)="a4ab47615f51b8a5b68960865b03681ff5bb9e36b2d200db0419a23b6f16dd8c521fc6540d0d46574b04b855fa857b82cd0cf9", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="773f5598ab7f92c04bd5a7")
openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x101000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x3, 0x4833082b, 0xac, 'queue0\x00', 0x5})
tkill(r0, 0x2000000000004)

[ 1537.054508][T20266] binder: release 22640:22644 transaction 50 out, still active
[ 1537.088349][T20266] binder: send failed reply for transaction 50, target dead
03:55:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

03:55:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0xf0ffffff7f0000)

[ 1537.159228][T22680] FAULT_INJECTION: forcing a failure.
[ 1537.159228][T22680] name failslab, interval 1, probability 0, space 0, times 0
[ 1537.235736][T22680] CPU: 1 PID: 22680 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1537.244818][T22680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1537.254885][T22680] Call Trace:
[ 1537.258185][T22680]  dump_stack+0x1db/0x2d0
[ 1537.262532][T22680]  ? dump_stack_print_info.cold+0x20/0x20
[ 1537.268262][T22680]  ? __lock_is_held+0xb6/0x140
[ 1537.273053][T22680]  should_fail.cold+0xa/0x14
[ 1537.277653][T22680]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1537.283477][T22680]  ? ___might_sleep+0x1e7/0x310
[ 1537.288340][T22680]  ? arch_local_save_flags+0x50/0x50
[ 1537.293653][T22680]  __should_failslab+0x121/0x190
[ 1537.293711][T22680]  should_failslab+0x9/0x14
[ 1537.293727][T22680]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1537.293764][T22680]  kernfs_fop_open+0x342/0x1030
[ 1537.303425][T22680]  ? kernfs_notify+0x210/0x210
[ 1537.303451][T22680]  ? may_umount_tree+0x1d0/0x1d0
[ 1537.303493][T22680]  ? security_file_open+0x8d/0x2a0
[ 1537.303516][T22680]  do_dentry_open+0x495/0x1230
[ 1537.303536][T22680]  ? kernfs_notify+0x210/0x210
[ 1537.303574][T22680]  ? chown_common+0x740/0x740
[ 1537.342680][T22680]  ? security_inode_permission+0xd5/0x110
[ 1537.348397][T22680]  ? inode_permission+0xb4/0x570
[ 1537.353339][T22680]  vfs_open+0xa0/0xd0
[ 1537.357325][T22680]  path_openat+0x144f/0x5660
[ 1537.361919][T22680]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1537.367592][T22680]  ? path_lookupat.isra.0+0xba0/0xba0
[ 1537.372995][T22680]  ? kasan_check_read+0x11/0x20
[ 1537.377847][T22680]  ? do_raw_spin_unlock+0xa0/0x330
[ 1537.383040][T22680]  ? do_raw_spin_trylock+0x270/0x270
[ 1537.388318][T22680]  ? __phys_addr_symbol+0x30/0x70
[ 1537.393352][T22680]  do_filp_open+0x26f/0x370
[ 1537.397962][T22680]  ? may_open_dev+0x100/0x100
[ 1537.402662][T22680]  ? digsig_verify.cold+0x32/0x32
[ 1537.407699][T22680]  ? __alloc_fd+0x700/0x700
[ 1537.412206][T22680]  ? getname_flags+0x277/0x5b0
[ 1537.416989][T22680]  do_sys_open+0x59a/0x7c0
[ 1537.421420][T22680]  ? filp_open+0x80/0x80
[ 1537.425673][T22680]  ? __ia32_sys_read+0xb0/0xb0
[ 1537.430445][T22680]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1537.436521][T22680]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1537.442326][T22680]  __x64_sys_openat+0x9d/0x100
[ 1537.447114][T22680]  do_syscall_64+0x1a3/0x800
[ 1537.451698][T22680]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1537.457316][T22680]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1537.463039][T22680]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1537.468607][T22680]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1537.474503][T22680] RIP: 0033:0x458099
[ 1537.478399][T22680] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1537.498117][T22680] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1537.506514][T22680] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1537.514486][T22680] RDX: 000000000000275a RSI: 0000000020000100 RDI: 0000000000000003
[ 1537.522448][T22680] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
03:55:17 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x2b00000000000000)

03:55:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

03:55:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 1537.530400][T22680] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
[ 1537.538349][T22680] R13: 00000000004c408f R14: 00000000004d72a0 R15: 0000000000000004
03:55:17 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x2d00000000000000)

03:55:18 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:18 executing program 0 (fault-call:1 fault-nth:5):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x3000000000000000)

03:55:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

[ 1537.956497][ T3180] binder: release 22679:22691 transaction 54 out, still active
[ 1537.978965][T20266] binder: send failed reply for transaction 54, target dead
[ 1538.018945][T22725] FAULT_INJECTION: forcing a failure.
[ 1538.018945][T22725] name failslab, interval 1, probability 0, space 0, times 0
[ 1538.075889][T22725] CPU: 1 PID: 22725 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1538.084923][T22725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1538.094968][T22725] Call Trace:
[ 1538.098274][T22725]  dump_stack+0x1db/0x2d0
[ 1538.102626][T22725]  ? dump_stack_print_info.cold+0x20/0x20
[ 1538.108352][T22725]  ? do_syscall_64+0x1a3/0x800
[ 1538.113105][T22725]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1538.119159][T22725]  ? __lock_is_held+0xb6/0x140
[ 1538.123916][T22725]  should_fail.cold+0xa/0x14
[ 1538.128507][T22725]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1538.134334][T22725]  ? ___might_sleep+0x1e7/0x310
[ 1538.135934][ T3180] binder: release 22726:22730 transaction 58 out, still active
[ 1538.139186][T22725]  ? arch_local_save_flags+0x50/0x50
[ 1538.139203][T22725]  ? lockdep_init_map+0x10c/0x5b0
[ 1538.139228][T22725]  __should_failslab+0x121/0x190
[ 1538.161962][T22725]  should_failslab+0x9/0x14
[ 1538.166501][T22725]  kmem_cache_alloc+0x2be/0x710
[ 1538.168626][ T3180] binder: send failed reply for transaction 58, target dead
[ 1538.171356][T22725]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1538.171377][T22725]  ? kmem_cache_alloc_trace+0x354/0x760
[ 1538.171401][T22725]  seq_open+0x5c/0x1c0
[ 1538.171431][T22725]  kernfs_fop_open+0x68e/0x1030
[ 1538.171456][T22725]  ? kernfs_notify+0x210/0x210
[ 1538.203522][T22725]  ? may_umount_tree+0x1d0/0x1d0
[ 1538.208446][T22725]  ? security_file_open+0x8d/0x2a0
[ 1538.213542][T22725]  do_dentry_open+0x495/0x1230
[ 1538.218289][T22725]  ? kernfs_notify+0x210/0x210
[ 1538.223042][T22725]  ? chown_common+0x740/0x740
[ 1538.227703][T22725]  ? security_inode_permission+0xd5/0x110
[ 1538.233410][T22725]  ? inode_permission+0xb4/0x570
[ 1538.238349][T22725]  vfs_open+0xa0/0xd0
[ 1538.242315][T22725]  path_openat+0x144f/0x5660
[ 1538.246893][T22725]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1538.252525][T22725]  ? path_lookupat.isra.0+0xba0/0xba0
[ 1538.257891][T22725]  ? kasan_check_read+0x11/0x20
[ 1538.262729][T22725]  ? do_raw_spin_unlock+0xa0/0x330
[ 1538.267834][T22725]  ? do_raw_spin_trylock+0x270/0x270
[ 1538.273117][T22725]  ? __phys_addr_symbol+0x30/0x70
[ 1538.278136][T22725]  do_filp_open+0x26f/0x370
[ 1538.282656][T22725]  ? may_open_dev+0x100/0x100
[ 1538.287329][T22725]  ? digsig_verify.cold+0x32/0x32
[ 1538.292346][T22725]  ? __alloc_fd+0x700/0x700
[ 1538.296853][T22725]  ? getname_flags+0x277/0x5b0
[ 1538.301605][T22725]  do_sys_open+0x59a/0x7c0
[ 1538.306021][T22725]  ? filp_open+0x80/0x80
[ 1538.310264][T22725]  ? __ia32_sys_read+0xb0/0xb0
[ 1538.315017][T22725]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1538.321152][T22725]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1538.326949][T22725]  __x64_sys_openat+0x9d/0x100
[ 1538.331700][T22725]  do_syscall_64+0x1a3/0x800
[ 1538.336273][T22725]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1538.341891][T22725]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1538.347595][T22725]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1538.353133][T22725]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1538.359008][T22725] RIP: 0033:0x458099
[ 1538.362887][T22725] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1538.382584][T22725] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1538.390980][T22725] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1538.398936][T22725] RDX: 000000000000275a RSI: 0000000020000100 RDI: 0000000000000003
[ 1538.406892][T22725] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1538.414850][T22725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
[ 1538.422805][T22725] R13: 00000000004c408f R14: 00000000004d72a0 R15: 0000000000000004
03:55:20 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="c92393de3b330c5f6f1ab87c0b150a6abb0856c4481a557e12bbc3c220512030e081b22211e3ab09f00be6a067701083f4720f11c73219fb620576e8876f6db04a9dec7a3d3acf8a25c4f700d6067cbc4da2fbc08ace933c79d5d2eaeb82b089a828ab3116fad3bd77773dfa532850460a1da5b846f53943420afe9f04fbd37f6ada2585b69002d21898d9cba1220614fb8affb02caa7161dfa4612d183d90f978aed8c330df1e2198577d5fd8b5e2bf572672694de7b450f1b128e90ce764c40ddfe504e93e029fac1fc0c296d9fdb7e8b3b67c2d72723a8f", 0xd9}, {&(0x7f00000000c0)="84e4bf3cb75df08e80b69f00d5a2549343ecfb94a0edb1ff70ead6865ab322f7e8f3105bc6cf383d59051d726b90eacab5da576794b8681bbb2a222187a709353be43ae480c38df208634574a22980dca29f7082b81c1ed50b6a8515c298d7ef361dd860f9aeaf6678179e94e13e80fd523450abc1dc4e9170b483ef", 0x7c}], 0x2, 0x0, 0x0, 0x840}], 0x1, 0x4044001)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
wait4(r1, 0x0, 0x40000000, &(0x7f0000000300))
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
tkill(r1, 0x17)

03:55:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

03:55:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280))
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresuid(&(0x7f00000003c0), &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000480))
r5 = getegid()
r6 = getuid()
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000580)={0x1f0, 0x0, 0x6, [{{0x2, 0x1, 0x6, 0x8, 0xc1, 0xaac7, {0x1, 0x1, 0x800, 0x0, 0x47cc, 0x6, 0x1, 0x10000, 0x5, 0x0, 0x40, r2, r3, 0x8c}}, {0x4, 0xffff, 0x8, 0x6, 'security'}}, {{0x1, 0x2, 0x1f, 0x6, 0x0, 0x5e2bf3ce, {0x2, 0x8, 0x80, 0x80, 0x400, 0x461d, 0x200, 0x9, 0xffff, 0xfffffffffffffffb, 0x80000001, r4, r5, 0x3ff, 0x2}}, {0x1, 0x4, 0x6, 0x100000000, 'system'}}, {{0x0, 0x2, 0x101, 0x9, 0x9, 0x200800000, {0x2, 0xda, 0x1, 0xff, 0x9, 0x3, 0x400, 0x100000000, 0x0, 0x10000, 0xce, r6, r7, 0x8}}, {0x4, 0x7, 0x5, 0x7, 'bdev*'}}]}, 0x1f0)
r8 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, 0x0, 0x0)
fsetxattr(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="737973ffffffff725e73656c66004985152551126eab7f12e3403ae73b2771bafd006a40c8a3625ecb96c9328f85fdbfa45faf7cc68a7fe64486fdc8d0366c1d4988a3a01e70396adf83269c80b84a95494f57f35a531bd19792f2f9a93d7fefc6b37c7744748f8a0c0d265b6ce35b296b97935215dd7dda85b4d0c8de08865feb9d307abc952650c0bf4d81ac36fdaedeb35f080b9a9e95494d920525bd341dbb441ada181c8952acdfc36136e60ef3e956b244a4a810d52293134cc49dc2054c16bf9cc4f7"], &(0x7f0000000040)='[mime_type[+\x00', 0xd, 0x3)
mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='fuse\x00', 0x38, &(0x7f0000000800)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x67}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xfff}}], [{@seclabel='seclabel'}, {@obj_role={'obj_role', 0x3d, 'trusted'}}, {@subj_user={'subj_user', 0x3d, 'bdev*'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@measure='measure'}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio='permit_directio'}]}})
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))

03:55:20 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:20 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
open(&(0x7f00000003c0)='./file0\x00', 0x400, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:20 executing program 0 (fault-call:1 fault-nth:6):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000000)=0x6)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

[ 1540.193276][T22745] FAULT_INJECTION: forcing a failure.
[ 1540.193276][T22745] name failslab, interval 1, probability 0, space 0, times 0
03:55:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100000000402000, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x20, 0x4)
fchdir(r0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

[ 1540.242830][ T3180] binder: release 22735:22753 transaction 62 out, still active
[ 1540.274115][T22745] CPU: 0 PID: 22745 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1540.283167][T22745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:55:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

03:55:20 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20000, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14)
write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x5}, 0xf)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400000, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000240)={0x0, @reserved})
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
write$P9_RLCREATE(r2, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x0, 0x1000000000, 0x8}, 0x7fffffff}}, 0x12)
write$cgroup_pid(r4, 0x0, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4)

[ 1540.293229][T22745] Call Trace:
[ 1540.296537][T22745]  dump_stack+0x1db/0x2d0
[ 1540.300892][T22745]  ? dump_stack_print_info.cold+0x20/0x20
[ 1540.306647][T22745]  should_fail.cold+0xa/0x14
[ 1540.311257][T22745]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1540.317078][T22745]  ? ___might_sleep+0x1e7/0x310
[ 1540.321940][T22745]  ? arch_local_save_flags+0x50/0x50
[ 1540.327248][T22745]  __should_failslab+0x121/0x190
[ 1540.332217][T22745]  should_failslab+0x9/0x14
[ 1540.336732][T22745]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1540.342143][T22745]  kernfs_fop_open+0xaaf/0x1030
[ 1540.347021][T22745]  ? kernfs_notify+0x210/0x210
[ 1540.351801][T22745]  ? may_umount_tree+0x1d0/0x1d0
[ 1540.356763][T22745]  ? security_file_open+0x8d/0x2a0
[ 1540.361896][T22745]  do_dentry_open+0x495/0x1230
[ 1540.366676][T22745]  ? kernfs_notify+0x210/0x210
[ 1540.371455][T22745]  ? chown_common+0x740/0x740
[ 1540.376142][T22745]  ? security_inode_permission+0xd5/0x110
[ 1540.381897][T22745]  ? inode_permission+0xb4/0x570
[ 1540.385734][T20266] binder: send failed reply for transaction 62, target dead
[ 1540.386844][T22745]  vfs_open+0xa0/0xd0
[ 1540.386863][T22745]  path_openat+0x144f/0x5660
[ 1540.386883][T22745]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1540.386917][T22745]  ? path_lookupat.isra.0+0xba0/0xba0
[ 1540.413677][T22745]  ? kasan_check_read+0x11/0x20
[ 1540.418516][T22745]  ? do_raw_spin_unlock+0xa0/0x330
[ 1540.423612][T22745]  ? do_raw_spin_trylock+0x270/0x270
[ 1540.428881][T22745]  ? __phys_addr_symbol+0x30/0x70
[ 1540.433903][T22745]  do_filp_open+0x26f/0x370
[ 1540.438394][T22745]  ? may_open_dev+0x100/0x100
[ 1540.443070][T22745]  ? digsig_verify.cold+0x32/0x32
[ 1540.448338][T22745]  ? __alloc_fd+0x700/0x700
[ 1540.452826][T22745]  ? getname_flags+0x277/0x5b0
[ 1540.457594][T22745]  do_sys_open+0x59a/0x7c0
[ 1540.462002][T22745]  ? filp_open+0x80/0x80
[ 1540.466236][T22745]  ? __ia32_sys_read+0xb0/0xb0
[ 1540.470987][T22745]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1540.477040][T22745]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1540.482858][T22745]  __x64_sys_openat+0x9d/0x100
[ 1540.487702][T22745]  do_syscall_64+0x1a3/0x800
[ 1540.492292][T22745]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1540.497921][T22745]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1540.503648][T22745]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1540.509186][T22745]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1540.515063][T22745] RIP: 0033:0x458099
[ 1540.518943][T22745] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1540.538529][T22745] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1540.546923][T22745] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1540.554878][T22745] RDX: 000000000000275a RSI: 0000000020000100 RDI: 0000000000000003
[ 1540.562851][T22745] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1540.570809][T22745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
[ 1540.578769][T22745] R13: 00000000004c408f R14: 00000000004d72a0 R15: 0000000000000004
03:55:21 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x9, 0x0, [{0x80, 0x4, 0x0, 0x0, @adapter={0xf3, 0x2ff, 0x9, 0x9, 0x400}}, {0x9, 0x7, 0x0, 0x0, @sint={0x5, 0xfffffffffffffffb}}, {0x7940ba8a, 0x3, 0x0, 0x0, @sint={0x7, 0x5}}, {0xfffffffffffffff9, 0x1, 0x0, 0x0, @irqchip={0x9, 0x2}}, {0x2dff75d0, 0x1, 0x0, 0x0, @sint}, {0x1, 0x4, 0x0, 0x0, @adapter={0x8000, 0x1, 0x7fc9, 0xffffffff7fffffff, 0x20}}, {0x4, 0x0, 0x0, 0x0, @sint={0x9, 0x1}}, {0x1ff, 0x1, 0x0, 0x0, @irqchip={0xfffffffffffffffe, 0x9}}, {0x4, 0x3, 0x0, 0x0, @adapter={0x100000001, 0x1, 0x7, 0x7, 0x4}}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

03:55:21 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$media(&(0x7f0000005700)='/dev/media#\x00', 0xbe5f, 0x20400)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000005740)={<r3=>0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x7, 0xffffffffffffffc5, 0x7ff, 0x0, 0x40}, &(0x7f0000005800)=0x98)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000005840)={r3, 0x8}, 0x8)
r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, 0x0, 0x0)

03:55:21 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:21 executing program 0 (fault-call:1 fault-nth:7):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:21 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

03:55:21 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000003c0)={0x6, 0x800, 0x1})
r2 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x4)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/65, 0x41}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/178, 0xb2}], 0x5, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9b4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8055)
dup3(r1, r1, 0x80000)
r4 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000005c0)=0x5e)
write$cgroup_pid(r4, 0x0, 0x0)

[ 1541.065753][T22787] FAULT_INJECTION: forcing a failure.
[ 1541.065753][T22787] name failslab, interval 1, probability 0, space 0, times 0
[ 1541.097544][T22787] CPU: 1 PID: 22787 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
03:55:21 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x9)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)=0x84)

[ 1541.106623][T22787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1541.116683][T22787] Call Trace:
[ 1541.119988][T22787]  dump_stack+0x1db/0x2d0
[ 1541.124334][T22787]  ? dump_stack_print_info.cold+0x20/0x20
[ 1541.130097][T22787]  should_fail.cold+0xa/0x14
[ 1541.134711][T22787]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1541.140542][T22787]  ? ___might_sleep+0x1e7/0x310
[ 1541.145404][T22787]  ? arch_local_save_flags+0x50/0x50
[ 1541.150711][T22787]  __should_failslab+0x121/0x190
[ 1541.155673][T22787]  should_failslab+0x9/0x14
[ 1541.160192][T22787]  kmem_cache_alloc_trace+0x2d1/0x760
03:55:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

[ 1541.165588][T22787]  kernfs_fop_open+0xaaf/0x1030
[ 1541.170457][T22787]  ? kernfs_notify+0x210/0x210
[ 1541.175239][T22787]  ? may_umount_tree+0x1d0/0x1d0
[ 1541.180197][T22787]  ? security_file_open+0x8d/0x2a0
[ 1541.185329][T22787]  do_dentry_open+0x495/0x1230
[ 1541.190107][T22787]  ? kernfs_notify+0x210/0x210
[ 1541.194894][T22787]  ? chown_common+0x740/0x740
[ 1541.199595][T22787]  ? security_inode_permission+0xd5/0x110
[ 1541.205329][T22787]  ? inode_permission+0xb4/0x570
[ 1541.210368][T22787]  vfs_open+0xa0/0xd0
03:55:21 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000000)=0x2, 0x4)
getpeername(r1, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80)

[ 1541.214359][T22787]  path_openat+0x144f/0x5660
[ 1541.218950][T22787]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1541.224596][T22787]  ? path_lookupat.isra.0+0xba0/0xba0
[ 1541.224626][T22787]  ? kasan_check_read+0x11/0x20
[ 1541.224646][T22787]  ? do_raw_spin_unlock+0xa0/0x330
[ 1541.239931][T22787]  ? do_raw_spin_trylock+0x270/0x270
[ 1541.245225][T22787]  ? __phys_addr_symbol+0x30/0x70
[ 1541.250276][T22787]  do_filp_open+0x26f/0x370
[ 1541.254792][T22787]  ? may_open_dev+0x100/0x100
[ 1541.259486][T22787]  ? digsig_verify.cold+0x32/0x32
[ 1541.264563][T22787]  ? __alloc_fd+0x700/0x700
[ 1541.269077][T22787]  ? getname_flags+0x277/0x5b0
[ 1541.273857][T22787]  do_sys_open+0x59a/0x7c0
[ 1541.278297][T22787]  ? filp_open+0x80/0x80
[ 1541.282559][T22787]  ? __ia32_sys_read+0xb0/0xb0
[ 1541.287333][T22787]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1541.293405][T22787]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1541.299225][T22787]  __x64_sys_openat+0x9d/0x100
[ 1541.304000][T22787]  do_syscall_64+0x1a3/0x800
[ 1541.308605][T22787]  ? syscall_return_slowpath+0x5f0/0x5f0
03:55:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

[ 1541.314248][T22787]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1541.319988][T22787]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1541.325579][T22787]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1541.331465][T22787] RIP: 0033:0x458099
[ 1541.335362][T22787] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1541.335372][T22787] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1541.335387][T22787] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1541.335396][T22787] RDX: 000000000000275a RSI: 0000000020000100 RDI: 0000000000000003
[ 1541.335406][T22787] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1541.335416][T22787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
[ 1541.335426][T22787] R13: 00000000004c408f R14: 00000000004d72a0 R15: 0000000000000004
[ 1541.382793][T22814] binder: 22777:22814 Release 1 refcount change on invalid ref 1 ret -22
[ 1541.429614][T22811] binder: 22777:22811 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:24 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = semget(0x2, 0x5, 0x104)
semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000080)=""/142)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:24 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
fchdir(r0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x7}, 0x28, 0x2)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

03:55:24 executing program 0 (fault-call:1 fault-nth:8):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:24 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:24 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

03:55:24 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
r2 = getuid()
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getgid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r5=>0x0}, &(0x7f00000001c0)=0xc)
setxattr$system_posix_acl(&(0x7f0000000000)='\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x2, r2}], {0x4, 0x4}, [{0x8, 0x3, r3}, {0x8, 0x6, r4}, {0x8, 0x1, r5}], {0x10, 0x1}, {0x20, 0x5}}, 0x4c, 0x2)
mkdirat(r0, &(0x7f00000002c0)='./file0\x00', 0x80)
r6 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, 0x0, 0x0)

03:55:24 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

[ 1544.195586][T22842] binder: 22829:22842 Release 1 refcount change on invalid ref 1 ret -22
[ 1544.208187][T22842] binder: 22829:22842 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:24 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
recvfrom$llc(r1, &(0x7f0000000040)=""/137, 0x89, 0x40000100, &(0x7f0000000100)={0x1a, 0xffff, 0x8000000, 0x7, 0x1ff, 0x6, @broadcast}, 0x10)
fchdir(r0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:24 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='.group.stat\x00', 0x275a, 0x0)

03:55:27 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='c\x00roup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getgroups(0x3, &(0x7f0000000100)=[0xee01, 0x0, <r4=>0x0])
fchown(r1, r3, r4)
faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x200)

03:55:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

03:55:27 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='/group.stat\x00', 0x275a, 0x0)

03:55:27 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:27 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x2c8401, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r0, &(0x7f00000001c0)="88683a4ffd3cbcad207dd0a2d3367176b5e69f9b9a13a422b3e53ff2232756494ac439f0b32fdb8b91465f70dc8420d226f4281147ac7f53beabc9a1b449ef684bac7975b0398c2b5413a79e74e2891cd5fa8ab920558d3aa60cd612bd060ef17d9f9273abd6b264dd8a352937eed454450d1fff55a771e2afae874015eb3bcdcece354ff5b1830d472c1f27cfa969ced8d5ee924e9c4b578db389a19af0", &(0x7f00000002c0)=""/35}, 0x18)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = fcntl$dupfd(r3, 0x406, r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={<r5=>r1, r4, 0x0, 0x3, &(0x7f0000000340)='.&\x00', 0xffffffffffffffff}, 0x30)
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000000))
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x17)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180)=0x600000000000, 0x4)
setsockopt$packet_int(r4, 0x107, 0x1d, &(0x7f0000000100)=0x6, 0x4)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
fcntl$setownex(r4, 0xf, &(0x7f00000003c0)={0x0, r5})
ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000000c0)={0x0, 0x401, 0x9, [], &(0x7f0000000080)=0x8})

03:55:27 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:27 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

03:55:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

03:55:27 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.ttat\x00', 0x275a, 0x0)

03:55:27 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

03:55:27 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="02003b66cca59ef679", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=<r2=>0x0], &(0x7f0000000100)=0x24)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x9, 0x5, [0x1, 0xfffffffffffffff8, 0x9, 0x3, 0x6]}, 0x12)
r3 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x21}, 0x43, r4})
write$cgroup_pid(r3, 0x0, 0xffffffffffffffb3)
fchmod(r0, 0x20)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000180)=0x2)

[ 1547.324503][T22894] binder: 22874:22894 Release 1 refcount change on invalid ref 1 ret -22
[ 1547.361235][T22894] binder: 22874:22894 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:27 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x101040, 0x0)
write$P9_RLERROR(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0006000701a29ff2166f9f2f640501ad65a52235388488a7ce2ad71dd40add714d1f5acfa006262194d1d0388ea504a10fc607f115f8686b0000000000000000"], 0xb)
select(0x40, &(0x7f0000000080)={0x100000000, 0x3ff, 0x7, 0x8, 0x25f1, 0x3, 0x5, 0x3f}, &(0x7f00000000c0)={0x8, 0x8, 0x3, 0x8, 0x3ff, 0x0, 0x0, 0x7}, &(0x7f0000000100)={0x6, 0x6e7, 0x0, 0x1000, 0x7, 0x600000000000000, 0x7ff, 0x8}, &(0x7f0000000180)={0x77359400})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, <r4=>0x0}, &(0x7f00000002c0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getgid()
fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
fsetxattr$system_posix_acl(r2, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x4}, [{0x2, 0x4, r4}, {0x2, 0x7, r5}, {0x2, 0x4, r6}, {0x2, 0x2, r7}], {0x4, 0x5}, [{0x8, 0x2, r8}, {0x8, 0x1, r9}], {0x10, 0x1}, {0x20, 0x7}}, 0x54, 0x3)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

03:55:27 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='\xecU.\xf1k)\x17\x87\x0f', 0x200002, 0x0)
fchdir(r0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x86940, 0x0)
sendto$inet6(r1, &(0x7f0000000080)="2733a6f6d7ca99cfc129cb4bdc3fa607720a93226c0242bf21751ccea336f208e5164843666d5473322a59f8d2c7dede36b6cfa3b93bee4bb157140c423df7741901a24a753d002f6abad5dba02325293c6f58c0bc060c31d2adc0f90eb444aa68892e63f8e37565dccc5badc2d0c752938cc965e1edab94877910ba112812da4d7aad43a9e4941af1f18f0665c3415a728622d0ba9d112652a1c00833d12f2c343eff8b26f00789b8567b46cf9a550144875ca43b082e6a39ba65c965e7f037834473e47b568ec7b6b0a9e2649767d291e2117f693b1e3ec6a3f6f7d313476120bd9e8226b3fbede286d58aabe14a290af9154bf40c", 0xf6, 0x4001, &(0x7f0000000180)={0xa, 0x4e22, 0xf800000000000000, @mcast2, 0x95}, 0x1c)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x200, 0xfffffdde)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x40}}, 0x18)
r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:27 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.ssat\x00', 0x275a, 0x0)

03:55:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

03:55:28 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:28 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='cgroup.procs\x00', 0xfffffffffffffff8)
keyctl$instantiate(0xc, r3, &(0x7f00000001c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '%ppp0:'}, 0x1f, 0x0)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000000))
write$cgroup_pid(r2, 0x0, 0x0)

03:55:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

03:55:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stas\x00', 0x275a, 0x0)

[ 1548.197841][T22949] binder: 22945:22949 transaction failed 29189/-22, size 24-8 line 2896
[ 1548.207871][T22949] binder: 22945:22949 Release 1 refcount change on invalid ref 1 ret -22
[ 1548.216905][T22949] binder: 22945:22949 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:28 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000380)=0x18)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:28 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x5})
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0xd000)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

[ 1548.429345][T22958] IPVS: ftp: loaded support on port[0] = 21
[ 1548.522399][T22958] chnl_net:caif_netlink_parms(): no params data found
[ 1548.556818][T22958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1548.564041][T22958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1548.571909][T22958] device bridge_slave_0 entered promiscuous mode
[ 1548.580150][T22958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1548.587850][T22958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1548.595961][T22958] device bridge_slave_1 entered promiscuous mode
[ 1548.623030][T22958] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1548.632948][T22958] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1548.661346][T22958] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1548.669362][T22958] team0: Port device team_slave_0 added
[ 1548.675901][T22958] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1548.684041][T22958] team0: Port device team_slave_1 added
[ 1548.690020][T22958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1548.698691][T22958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1548.711663][    T7] device bridge_slave_1 left promiscuous mode
[ 1548.721818][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1548.764018][    T7] device bridge_slave_0 left promiscuous mode
[ 1548.770320][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1548.916782][    T7] device hsr_slave_1 left promiscuous mode
[ 1548.947294][    T7] device hsr_slave_0 left promiscuous mode
[ 1548.978040][    T7] team0 (unregistering): Port device team_slave_1 removed
[ 1548.992191][    T7] team0 (unregistering): Port device team_slave_0 removed
[ 1549.006006][    T7] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1549.039419][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1549.120033][    T7] bond0 (unregistering): Released all slaves
[ 1549.274706][T22958] device hsr_slave_0 entered promiscuous mode
[ 1549.343155][T22958] device hsr_slave_1 entered promiscuous mode
[ 1549.413264][T22958] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1549.420967][T22958] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1549.437712][T22958] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 1549.479508][T22958] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1549.491668][T22958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1549.502523][T22958] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1549.509704][T20266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1549.510198][T20266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1549.527682][T22958] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1549.535037][T22958] 8021q: adding VLAN 0 to HW filter on device team0
[ 1549.538375][T22958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1549.549772][T20266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1549.558393][T20266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1549.567663][T20266] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1549.574752][T20266] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1549.582404][T20266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1549.592300][T22958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1549.642919][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1549.652246][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1549.660760][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1549.667872][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1549.678360][T22958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1549.695630][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1549.711000][T22958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1549.719503][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1549.731469][T22958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1549.739889][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1549.749575][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1549.764113][T22958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1549.782059][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1549.790318][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1549.805916][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1549.823172][T22958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1549.842867][T22958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1549.850595][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1549.868226][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1549.877103][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1549.885962][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1549.896614][T22958] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1549.904251][T22958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1549.927072][T22958] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1549.940540][T22958] 8021q: adding VLAN 0 to HW filter on device batadv0
03:55:30 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioprio_get$pid(0x1, r0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x02', 0x275a, 0x0)

03:55:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

03:55:30 executing program 2:
r0 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$setperm(0x5, r0, 0x28000404)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000140)={@local, @remote, @local}, 0xc)
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180)=0x2, 0x4)
ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000000)=0x1)

03:55:30 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

03:55:30 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x0, @sdr={0x7479575a, 0xffffffff00000000}})
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:31 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x04', 0x275a, 0x0)

03:55:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

[ 1550.694802][T22989] binder: 22977:22989 transaction failed 29189/-22, size 24-8 line 2896
[ 1550.734558][T22989] binder: 22977:22989 Release 1 refcount change on invalid ref 1 ret -22
[ 1550.784495][T22999] binder: 22977:22999 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:31 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x10000)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:31 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x4002)
ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000040))
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='gg\x00\x00\x00\xf1\xff\xff\xff\x02\x00\x00\x00\\\x13\xe1\x1cM\x13\xac\xa5\xd9\xec=\x17\xff\xa4r\x83\xfc\x97\xdf;\xb6\x90\xe2W.C\x0fcl\x8e\xe7\xce\x91\xde\x1f\x19\xc5\xb6\xbeh\x0e\x1b\xc5Z\xa3\x8a-\x7f_\x15BG\x18N\xb8\xfb\xfb\x0fu\xb5i\xd0\x19\xcd\xc5\xf9n\xc07\xae\xee\x84\xc2)/\xf7\xe7\x11\xda\xb0\xe2`\xdb\xf8\xb2\xc0\x9d\xd2ZN\x8b\r\xb0\xc1w$:\xe7\x94<`~u(\'\x16<$_\xb4`^\xb3\"\xff\x16\xf4\xdb\xca\xce\xff\xc47i\xfai\x9b\xb70\x9a^\xc5.\x880?K}sz\x98\xe4\xb4z\x9d\xb5G\xf2\x06`\f\xd6\x02c\xf6j\xb9\x9cL\xf6\x1f\x8e\xa2', 0x2, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000000c0))
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

03:55:31 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x28a, 0x400043)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000080)={0x6, 0x0, [{0x40000001, 0x0, 0x3, 0x6, 0x36}, {0xc000001f, 0x16c, 0x6, 0x95f, 0x1e3}, {0xc000000f, 0x9, 0x210, 0x800, 0x39e36447}, {0xf, 0x2, 0x0, 0x710, 0x7}, {0x1, 0x2, 0x1d, 0x6, 0x4}, {0x4, 0x9, 0x0, 0x7, 0xfff}]})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:31 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\b', 0x275a, 0x0)

03:55:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

03:55:31 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x0, 0x9585, 0x400, 0x800, 0xfffffffffffff001, 0x8, 0x3, 0x100000001, 0x7, 0x10000, 0x1ff, 0x3ff, 0x2}, {0x9, 0x81, 0x6, 0x80, 0x5, 0x10001, 0xfffffffffffffff8, 0x4, 0x4, 0xffff, 0xe4a, 0x1, 0x7}, {0x9, 0x60e, 0x9, 0x7, 0x4, 0x0, 0x1, 0xff, 0x80, 0xfffffffffffffff7, 0x9dc0, 0x8, 0x47e}], 0x9})
fchdir(r0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0xfffffffffffffedb)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000180)={0x0, r1})
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
fsetxattr(r3, &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000100)='cgroup.procs\x00', 0xd, 0x1)

03:55:31 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

03:55:31 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x0, 0x2, 0xffffffff, 0x3, 0x4})
write$cgroup_pid(r2, 0x0, 0x0)

03:55:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x04', 0x275a, 0x0)

03:55:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

[ 1551.673123][T23036] binder: 23026:23036 transaction failed 29189/-22, size 24-8 line 2896
[ 1551.688518][T23036] binder: 23026:23036 Release 1 refcount change on invalid ref 1 ret -22
03:55:32 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

[ 1551.735074][T23043] binder: 23026:23043 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

03:55:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:32 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x7, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:32 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, 0x0, 0x0)
r2 = dup2(r0, r0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r3, &(0x7f0000000040)=""/59})

03:55:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

03:55:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:32 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

03:55:32 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x21)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/43)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:32 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

03:55:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:33 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

[ 1552.649993][T23089] binder: 23073:23089 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

03:55:33 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
flistxattr(r1, &(0x7f0000000080)=""/155, 0x9b)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:33 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000040))
r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="13c77ef55e6cabb07cb840104a13268077f0b924cb32606cc4c014ee6dd9f489d2c59e1873ace1b793fbeb16a61e340d955f53017b1220060afe407dcfc733d172ab81f7a11f626519039fd7db806ebc3d2d1e6cbe1f92ba57450b671b34f4")
write$cgroup_pid(r3, 0x0, 0x0)

03:55:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

03:55:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:33 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

[ 1553.360817][ T2979] binder: release 23073:23080 transaction 72 out, still active
[ 1553.371178][ T2979] binder: undelivered TRANSACTION_COMPLETE
[ 1553.385195][ T2979] binder: send failed reply for transaction 72, target dead
03:55:33 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, 0x0, 0xfffffee7)

03:55:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\xff', 0x275a, 0x0)

03:55:33 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

03:55:33 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
shutdown(r1, 0x1)
write$cgroup_pid(r1, 0x0, 0xfffffffffffffeab)

[ 1553.547976][T23136] binder: 23123:23136 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\xfe', 0x275a, 0x0)

[ 1554.252226][ T3180] binder: release 23123:23124 transaction 76 out, still active
[ 1554.272144][ T2979] binder: send failed reply for transaction 76, target dead
03:55:36 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setopts(0x4206, r0, 0x4, 0x0)

03:55:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

03:55:36 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = msgget$private(0x0, 0x200)
msgrcv(r1, &(0x7f0000000080)={0x0, ""/157}, 0xa5, 0x3, 0x1800)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x7)

03:55:36 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:36 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:36 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

03:55:36 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x7fff, 0x9, 0x1})
write$cgroup_pid(r2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x404000, 0x0)

03:55:36 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:36 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1556.583427][T23181] binder: 23168:23181 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

03:55:36 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000000)={{0x4, 0x9}, {0xf3a, 0x9c}, 0x8, 0x1, 0x8})
write$cgroup_pid(r2, 0x0, 0x0)

[ 1557.317131][ T3180] binder: release 23168:23174 transaction 80 out, still active
[ 1557.347437][ T3180] binder: send failed reply for transaction 80, target dead
03:55:39 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000100)={0xb3bb}, 0x0, 0x0, 0x167)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x10000)
ioctl$KDSKBLED(r2, 0x4b65, 0x6)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000080)=""/41)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x67)
tkill(r0, 0x17)
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0), 0x4)

03:55:39 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

03:55:39 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:39 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:39 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

03:55:39 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
fcntl$getown(r1, 0x9)

03:55:39 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x17)

[ 1559.695152][T23227] binder_alloc: 23215: binder_alloc_buf, no vma
[ 1559.725531][T23227] binder: 23215:23227 transaction failed 29189/-3, size 24-8 line 3035
03:55:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

03:55:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:40 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
accept(r1, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000000)=0x80)
tkill(r0, 0x10000000000025)

[ 1559.748503][T23232] binder: 23215:23232 Release 1 refcount change on invalid ref 1 ret -22
[ 1559.774523][T23227] binder: 23215:23227 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:40 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4b, 0x4)

03:55:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

03:55:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

03:55:40 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40080, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fd)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x64}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000000)={0x1, {0x0, 0x989680}, 0x6, 0x6})
write$cgroup_pid(r2, 0x0, 0x0)

03:55:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

03:55:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:40 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:40 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x17)

03:55:40 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000080)='vmnet0/posix_acl_access', 0x17)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
linkat(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1000)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

[ 1560.591857][T23279] binder_alloc: 23275: binder_alloc_buf, no vma
[ 1560.598805][T23279] binder: 23275:23279 transaction failed 29189/-3, size 24-8 line 3035
[ 1560.619739][T23279] binder: 23275:23279 Release 1 refcount change on invalid ref 1 ret -22
[ 1560.656245][T23279] binder: 23275:23279 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

03:55:43 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:43 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x6, 0x1, 0x91a5, 0x7ff, 'syz1\x00', 0x179})
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

03:55:43 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:43 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x800)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r2, 0xa7, "0e252d", "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"}}, 0x110)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:43 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x17)

03:55:43 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgrou\x88/syz0\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1)
write$cgroup_pid(r2, 0x0, 0xffffffffffffff3e)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)

03:55:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

03:55:43 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x2)

[ 1562.940827][T23311] binder_alloc: 23297: binder_alloc_buf, no vma
[ 1562.956421][T23311] binder: 23297:23311 transaction failed 29189/-3, size 24-8 line 3035
03:55:43 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={<r1=>0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x84)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r1, 0x200}, 0x8)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

[ 1563.000588][T23320] binder: 23297:23320 Release 1 refcount change on invalid ref 1 ret -22
03:55:43 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x4)

[ 1563.065045][T23311] binder: 23297:23311 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

03:55:43 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)

03:55:43 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x408)

03:55:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

03:55:44 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40000, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x80000000, 0x8, 0x100000000, 0x84}, {0xfffffffffffffc00, 0x10000000000000, 0x7, 0x5}, {0x1, 0x7, 0xe7f, 0x100}, {0x10001, 0xd41, 0x16, 0x9}, {0xffffffff7fffffff, 0x7, 0x1000, 0x3}]})
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000080)=@routing={0x52dc200ee4bcf641, 0xe, 0x1, 0x6, 0x0, [@remote, @empty, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="a3cb716251d62d3cf6c172717110251c", @local, @mcast2]}, 0x78)

03:55:44 executing program 2:
fchdir(0xffffffffffffffff)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x10)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
connect$netrom(r2, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x3)
ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000080)={0x3, 0x3, 0x80000001, 0x1})
write$cgroup_pid(r3, 0x0, 0x0)

03:55:44 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x804)

03:55:44 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:44 executing program 3:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

03:55:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

03:55:44 executing program 2:
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400080, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='.\xafcg\xf2oup\x00b\xc5\xbc\x90e\xccc\xcd\v\xae\xa9w\xc9\x0f\'\x95\xca\x86\xb3\xd7\xb6\x1a\x13\tZ$z\xf1e\xf4r\xcb\xddC\xe5\xf6o\x85\x89\x90\x04)\x98\xdc\x9eym\xba\xfa\x9c\x1c\x8f\xae\x7f\xb9e\x9c\x18\x98\x86\x19K\xa3\x97;\x8c;I>t\xe6!7\xc5\xde\xaa\x06l\xfe|\x81\xfdK\xa5p\xc3\x93\xd0\xae9\xd9\x83\xe5\xd0\xe2W\xa1\x94\x02\xfe[\xc1aD^\xa3\xbc~\xa3\xb8\xceE\x9de \xf9M)\xab}\xa8\xca\xbe\x9f\x8a\x9c\xc8\x0e\xf9\x98Z\x1e<X\xeai\x04\xcaz\xf1v\xda\xa9-\xac\x1d\x05\xb5\x8c\x9d\xfbI\x94N\xc6/\x7f\x90\x9a\x00\xa3?~\xbc\x81^\x84V1\xa1;\xefa\x8f\x0f=+u\xab\xf3\xea\x9c\t*Q\xfc\x16\\\xe2r\xe5\xf9\xb6\v\xf5~\xc8\xdez\t\x12uh\x1d\xc38\x1aFf7\x8e\xf3O\xee\x84\xc6K\xaf \x1c\x9e\xda\x04\x8e|\xb8\xd5\x1d\xe1\xcd', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000140)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r2, 0x2, 0x18}, 0xc)
r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

03:55:44 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./coroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'eql\x00', {0x2, 0x4e21, @remote}})
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='\x90\x97x\x14\xd1\xcf\x02l+\"\x80jMR\xc1\x88a\xff\xdbw.)\xee\x7f\x7f?6\x01\x92O\xa8k\x81,\xbd\xfb\x1ag\xe7\xe0\x955\x7f\xd5\xf3\xc0\x1aPe\xe4R\x95\xe3q\x96\xd9\x86\xbcg\xb6\xc8\x97\x93Km\xc7S\xf5\xca\xb6j\xd2b8\xd5\xdb:AkRc\x14\xca\xb7\xa4$I\xb8\xcb\xa5\f\xc8\xa6\xedR\xb3(b\v\x1c8cC\x1e\'H\xf4\x1d\xd2', 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40400, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000140)={0x800100f, 0x2})
write$cgroup_pid(r2, 0x0, 0x0)

03:55:44 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x1000000)

[ 1563.919058][T23374] binder: 23357:23374 transaction failed 29189/-22, size 24-8 line 2896
03:55:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

[ 1563.960525][T23374] binder: 23357:23374 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:47 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x15004, 0x0, 0xf004, 0x10f000], 0x2, 0x85, 0xfffffffffffffeff})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socket$caif_seqpacket(0x25, 0x5, 0x4)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x5b7037f6f81e5679)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xe6)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:47 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x2)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0xfffffffffffffc34)

03:55:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

03:55:47 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x2000000)

03:55:47 executing program 3:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:47 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:47 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x4}}}]}, 0x30}}, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

03:55:47 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x4000000)

03:55:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

[ 1567.003648][T23416] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'.
[ 1567.013610][T23417] binder: 23404:23417 transaction failed 29189/-22, size 24-8 line 2896
03:55:47 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x61da73dc57b80c57, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={<r1=>0x0, 0x3d, "eab9544ce30d42b03bc6717ba8c28881cd3e9dfba83edaf96eb18045d8af2fd9c868065e104d6ce0617432c4db824d91e74619521b9d71f3d3c7859e07"}, &(0x7f00000000c0)=0x45)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)

[ 1567.044432][T23417] binder: 23404:23417 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:47 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

03:55:50 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x8040000)

03:55:50 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x6, 0x5, 0x9f, 0x8}, 'syz1\x00', 0x34})
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={<r3=>0x0, 0x34, "59f374b9bc783b4d13e87f2a0f1cd5ff941ea1bba18789740c8a988e2acf4d5065a364f5b7767f0126f494a3348d096b4af84f5f"}, &(0x7f00000000c0)=0x3c)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r3, 0x7ff}, 0x8)

03:55:50 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x301, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x0, 0x5, [@dev={[], 0x18}, @local, @dev={[], 0x24}, @dev={[], 0x1d}, @remote]})
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

03:55:50 executing program 3:
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:50 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

03:55:50 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='\x00\x00\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00')
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

03:55:50 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0xfeffffff)

[ 1570.099384][T23456] binder: 23444:23456 transaction failed 29189/-22, size 24-8 line 2896
[ 1570.136766][T23456] binder: 23444:23456 BC_ACQUIRE_DONE u0000000000000000 no match
03:55:50 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="e09e4cb17d6709caf0f4fd8b6c63416be99e4afca60a09686bca92e03c58e0561b04f5537fb4d0e28c5565baba0251f5e1ddf64612fac65e2e3f37c3c29597788c85e53a955f2e42f6697505167ec814cc88294b0b9772d822be804e6e4cebb702d9142eb15879edf19eb57ed793153263046206cdaff074f57f5baca5f90c8bc66f0cdec921ba736c78e547c8e8494ef6aed8ac214c16e222a97e", 0x9b}, {&(0x7f00000005c0)="d6083343054d7768be4683aa", 0xc}, {&(0x7f0000000600)="e2df5283b65dae41f52c59aafdf498ea91c184dc547438bdfc291f3032197f6ce0af737a0d19f398fe7d54423d717e1fa6ec7f2c151bd3d472fd498305e281079d2d23ceeec477fc06e4c39f49650834cd14d5f28722130ea5f6847f88c1d2e43cb18f595b13dbe5d84632721d278d961eb38391626c0949617a0166c8b949c74edd895c475781bcdf3e33c2062fce76872af3e1915f08060ccd3b96e51562a43dc5cadac7f222d7868c2309699842c0d52be6b464f3ef6c927a4d4839890f2746c60f2d7791cdc683b6454f93f084e65744723ddeb02d8c812fc4cad116206778de92d9c13d9e98b417", 0xea}, {&(0x7f0000000700)}, {&(0x7f0000000740)="78dba2887d57c4884aa215d062c778911662d1c4c3ffe960f42926c6ad739e948cadfff3", 0x24}, {&(0x7f0000000780)="d30874587de7f237f582748d614407b2fe79abdd29f05031f21572c8f17ec1a4c1157b5ea0c513372dec4fb46f874a22d117416470f84c410005641d3521a62acb4f0841e6166d98e7a1f71235e903ee624549687153adc3c26ee9fc370555b872e39a137b2bd2b7be8a61902076c7e91a02587ef77bba6cedaef3d99dd4a873c2e810d7a72f7691693a3fda72d457ab6d5bdc492672e7e30565d9a56927797089e0517d1706f504a5014115", 0xac}], 0x6, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x800, "1322cb11819766439ab44eaa87374c26503325c22753df5e030195d9b6fff06a17befcd3fdc6f70dee9f05abd1ec8da72ab2c8635bfb23c5d350b136c57cce64aad8f2b041dae21bc47c2c4a32a9be110355de9a5bc47c6ad8d8949831010e3afc6e22d0d3b8ec18560e37191a3c646877c92be3f0d8f79e081ee7494404f482f775d5c18a905dc50f965c3624e057e8d493cfe720f8a8b33fdbaf5829a825d467a922c1ea8b65799a8ad219a372e1640a50f8edb7ef38dd50edaaf25eab0a8ea53b499c5b184cdc84d9fcc20a1ad1c2c8614ba47aa7abb0200c37ab5f7d0f316194"}, {0x30, 0x29, 0xad, "b7f432007c035f49d013c49a3f948b235884d277f008aafb737761afd124e1"}, {0x98, 0x117, 0x5, "c532b12b2eb8b03b2bcff48f7643196439167bc9cb310ae1d45a8aea007786e1c680fdd3420c1ea135f5d6496bff5d60d87c8b8cfbdc3ba6b934f81f31afb40012a2771cfbf0b3836b1c8b89473ceff9fb100f94e7fc3a0cba85ea3d1618eb615c91f6deede6ce8db42d93edc801cf977960a7d5b946f75f35b6b4b624728234f0c3d2"}], 0x1c0}, 0x1f}, {{&(0x7f0000000a80)=@nl=@unspec, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)="9e3687186e5c203a95698f6aebbcc52f153bd3e3ccf5ba03334ed8a36424d8dead607a15ef5d1bb39c7dbdd4d01bfdc76e3806e36e8c17f483e992c78ea51f4c5790451a658249ab9acd51af7fab073a09b32b3756357542e4e38ff06df6521684e8a5493fda23ad54f26edc693d118f071f2eced1df657001977258c05becff718b9d03105ba987ab3eb5e82afc6a9eef2033f2aa7a6bb4ac0701076c8b86c7c21257426cb89babf0bc61461923c9e0196d9f1da74c27509b3bb9e6fd5f874aee9d6c2f1576abbffbe98d49d2c8affa0179aba6f90d09817cf82c", 0xdb}, {&(0x7f0000000c00)="32491f9e099fae31e9af5158c118b2055cf52f0b7f9239a8a00f98d07ba09fcd669a81e3e2a19f3c9a676c0029fe2eca43a7e9d833f53a3f2fd927aec09da204d701937eb29c0eafe593fad256f68bae69dcd33058f0eab1e8ac10618d53310740dd1f570c9ab355ad109d36286d76e7cfc7722bf8ee3c266dd5111468db81984e791c6ebd7c3044ed657bc1347c9a5f55fe21138de0", 0x96}, {&(0x7f0000000cc0)}], 0x3}, 0x7f}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000d40)="1a765a0c1bb1b87f906bba6a0ea3ed32ea76ac0e6707109c2df61c21932121aff509c43bc870a2419bf8aedf4c948a484a16b40f22516b326afb370f7114960bc02f3de71ac3858269c39239751c561c6b4145a04e712da6ae0bde2ac4ccabb687cd68936c7d6fb397e417301c61aa2740e427c0f8bd571f798b82e8812ae7bb38f2dd992ec97f30a0b16fdeb67dd496", 0x90}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="b3eab4f97bfed86dc7cc79023a74aa050121ee520430a6a89f9eeccb7c895b3682dafc48233941ca72a0badaeb79f46e7529a81f1c98aa5451c54bb9db5cc1f703aea4420ec16eeeb85a3cb89880a53095b5651b2808c810b5ce48634cbadd09b5e2ba27f707229a1f913979b1918b780c3c0265005eb9d48538272c3fb97cce2d4ebb4da44381e7ef3c5317fc9217f4f5a0302107aa706a00ac4d1ce92bee4d063f9e601a4a2493775fc8c1e2318e249842681f", 0xb4}, {&(0x7f0000001ec0)="61f1df100c8d1e22d79356", 0xb}], 0x4, &(0x7f0000001f40)=[{0x90, 0x102, 0x7, "23bbb1e10fa08dc6eae152e6b6e324e9c82e61e70b618e68d8ab6d6b8e04a5034723b01452884c30bf03da3ef99bf5983cb267a0991f796ea6b60d5422c4e1b8309653cde6814fcc81b9d320b75c5ea534f5be3bcb386e2e5217b98ab4a68023ce6cac78cea1710e3494be59f9ad73777c7f9a219c0e23a1713a"}, {0x30, 0x110, 0x80000000, "6ddb8380a2bbde94d9b20d1d8d1d781cf2346e054240deb85c92"}, {0x58, 0x101, 0x7, "82bb36934515737b60bc424266aad1241214b527742875a0888749ec6be06cf5f907747ba34b5ee5d763880125b533e32e03ab6e52134a8e51e27f1be2e56ce9e755d61e2ff876"}], 0x118}, 0x1}], 0x3, 0x40000c0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="5b2884797fd921325eedc862b4599336f11886dd23faf401649de961900c6472fc8811d3da7b96e7457312e8dc65d629c5b455b817b98b08734244a6be834dbca3282eef48e0be23192bf8a63f3ddaee7e3107c966ed1f11885ba2e8918c5bc0ecaf536b3b94fe1694c4ecfe9378697136c8b5c2d10f108ef4883106ea87dd0615c95495d5aa76a349f777e021b06cea76102a6cd9c3ff35173d9686ac3c80aa653b44e8e188ee22c870c9087ea1df7fdec7fb3910", 0xb5}, {&(0x7f00000000c0)="186833e9", 0x4}, {&(0x7f0000000100)="ebcb662f40aaae6ae0e72bd0dda5a7fe983fc7cd7456009ebf71fa11ea65da2fefc462ab96afcbbf920f50517cd6acde589ef4746771303734540e1ae39098e5c1b2b760cbad76533770b1b6aff3e2a22f7616e3f4b7bcc4db87aad0d5a564945aa86dc14865a5c8339f5f46273c8a7b16f24261c003b443feeea3836054bdc7", 0x80}, {&(0x7f0000000240)="8fd706a8a0d121c55de218b25614414130dae88dc02bab46ddbfeacdc271479e59e756807128c56a17ba8be8387eed6ef4eb908d01eb6c15ea893c29f2b1ff9aeaa3976eb0f19ac56b7a123ad8a220485a912eaf0bd6f6e36e0ecdbd7b748e345adf29a72c338f0bb150422578cdbe4dba6ff7fe5deeb6e71184a9062b538b68608963df7ada69bccd", 0x89}, {&(0x7f0000000340)="b08111c0fad27438b7d62be07a2f32623b6d3c9cf12df4c7732eccbbbeac1e9f976ac52086e3db6f17cb8fd8d779247575b8b897d25ecb61a251cf677fb15d0b7baccb86b380d456db97c5bad2e4864dfbce91baebf5cab6941b6dddaff2583a86a9ecdc2956feee3f1efa6ee155fabc90bce3127cc167802ac87931a2ca1fa054164e25c77f2c233cf4425d98e3ccdc67b23dc5bbafb409c01e1873a991197d03b48ace7c7de14b82d6c6aecca8c7ef5a3506fe42cf672674465f7ffdc6ef1252b7665453015d23762433df6c29fe5ff77bcb4f37a371edd32502ef89ad4ba8abf9a596fdc1cc49b9b58f31", 0xec}], 0x5)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000480)={@remote}, &(0x7f00000004c0)=0x14)
write$cgroup_pid(r1, 0x0, 0x180)
alarm(0x5)

03:55:50 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

03:55:50 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0xfffffffe)

03:55:50 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x7, 0x8, 0x6, 0x84000, r0})
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup\x1d\xd1\xa4h\xefL\v\xbee\xf6 \xf1\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:53 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(r0, 0x0, 0x4, 0x0)
tkill(r0, 0x17)

03:55:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

03:55:53 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x1000000000000)

03:55:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x304, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:53 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:53 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x38, 0x200, {"4dbefcf4e3d1f3d29ece289806c43a42d9ed8f8307e60f97e18a023deb"}}, {0x0, "910193349a4ab60cc09a9346d9b2e03fd2ca27714ce65c455e"}}, &(0x7f0000000480)=""/4096, 0x53, 0x1000, 0x1}, 0x20)
write$cgroup_pid(r2, 0x0, 0xfffffffffffffdbb)

03:55:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

03:55:53 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x100000000000000)

03:55:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

03:55:53 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_FPEXC(0xc, 0x80)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
r3 = fcntl$getown(r1, 0x9)
lsetxattr$security_evm(&(0x7f0000000140)='\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "58d140eba4365b18290cba468961ed6e"}, 0x11, 0x0)
capget(&(0x7f00000000c0)={0x19980330, r3}, &(0x7f0000000100)={0x4, 0xad9, 0x2, 0xd, 0x4, 0x6})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x111, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r4}}, 0x10)

03:55:53 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000080)={0x1, 0x1a, 0x3fe000000000, 0x8a, "3f5f3c9cab395f3529c73c3ce53a1703d50df0dd921e3b41a6d54b81c005342a"})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x80, @empty, 0xd38}}, 0x8, 0x2, 0xbe5, 0x0, 0x2}, &(0x7f00000000c0)=0x98)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r4, 0x3}, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:53 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

03:55:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0)

03:55:53 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x200000000000000)

03:55:53 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:54 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

03:55:54 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x80000001, 0x4)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
write$cgroup_pid(r1, 0x0, 0x278)

03:55:54 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x400000000000000)

03:55:54 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

03:55:54 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgr]uHPr+46p.', 0x2, 0x0)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
write$cgroup_pid(r2, 0x0, 0x0)

[ 1574.121236][ T3180] binder: release 23551:23568 transaction 93 out, still active
[ 1574.173678][ T3180] binder: send failed reply for transaction 93, target dead
03:55:54 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x20042, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r2=>0x0, 0x401}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x2, 0x4}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x100002)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000080)={0x0, {0xfba4, 0x8}})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x14a00, 0x0)

03:55:54 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x804000000000000)

03:55:54 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

03:55:54 executing program 2:
r0 = accept4$ax25(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x80800)
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
syz_emit_ethernet(0xa8, &(0x7f0000000000)={@remote, @random="7d587daef904", [{[{0x9100, 0x7, 0x0, 0x3}], {0x8100, 0x3ff, 0x2}}], {@llc={0x4, {@snap={0xaa, 0xab, '/', "5d0cac", 0x6003, "5067029663b9fd937fef4e723ad291245eff296ac4a26ac8c7ee275fc1693995289d5c81c3e8b5aedbf1f9bc356cea3b475def310cb6c7028c525903cf676fd1064c1635086f31d4ca3324b31a494ff56a05e6c8c0ed6aedd471c6d7435c073f3fb056032cd46920606cc0365118049721f787a1293264a5ab085db37346c1a56a902b07df9f0a225154"}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0xc2a, 0x0, 0x50a, 0xc7e]})

03:55:54 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1574.408954][ T2979] binder: release 23579:23591 transaction 97 out, still active
[ 1574.437593][ T2979] binder: send failed reply for transaction 97, target dead
03:55:55 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:55 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x3f, 0x8)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

03:55:55 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0xfeffffff00000000)

03:55:55 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

03:55:55 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000340)=""/187)
write$cgroup_pid(r1, 0x0, 0xfffffffffffffde6)

[ 1575.060355][ T3180] binder: release 23600:23615 transaction 101 out, still active
[ 1575.121222][ T2979] binder: send failed reply for transaction 101, target dead
03:55:55 executing program 1:
clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x8000, 0x0)
r1 = getuid()
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@ipv4_delroute={0x1d8, 0x19, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x14, 0x5, 0xfe, 0x2, 0xff, 0x8, 0xa00}, [@RTA_PRIORITY={0x8, 0x6, 0x81}, @RTA_METRICS={0xac, 0x8, "5859a9683b892159a8c5f5a8eb7ae90f8067942e365c581d4fb2a412e793157e056ff5566c72df34c62329bada7f5f4784205bb813f98f99835e950ed2e1afdfc911058976edf75f1dba2e6fc2c6556b4f26d5b9d788fa82a2c6b9c6fc5771e5ce96a63ade4f7e3ef7cb1f5f4d6dd351e74ed54fbc0633b58a4aa6b969f24f21be2b274b8fa32293d0604be4636ed5925f7ff7144e92fb0a14dc59f17ae56766b45127ba61b5"}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_UID={0x8, 0x19, r1}, @RTA_METRICS={0xf8, 0x8, "abba30e6859fbba07044207440af36e2b09f9a6d78aba53536d88edab02c2e584aa750d0e9bf67f2d185d7e1fce47fae9a27ff67777a03d74fb4f4158069fd8659939de35f0bb26cfd5a8f165307b2d799fd967ef2e2c85f47ffa72ae581043a35d5a5cdd4669eb237c743b0e72bb3d0fa70801323c0bb3eb7162af6b9f60cb01220d495d489bc309d98b1ee400d39595897a5f71de98f41ac3b8bc1f45c303f6775a9ad9b73bc2517f946abe70ac51f5d0a3f25b5817e2574f6d199b74b4f74a477bc1a459636d7f8062fa7c4c867974cd0780322b08298f166bfa30f774cec05293eb4f7c95071929db873a29875c89e6bebc8"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4014}, 0x4040840)
r2 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(r2, 0x0, 0x2, 0x0)
tkill(r2, 0x17)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getgroups(0xa, &(0x7f0000000100)=[0xffffffffffffffff, <r5=>0x0, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xee01])
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={r2, r4, r5}, 0xc)

03:55:55 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0xffffffff00000000)

03:55:55 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

03:55:55 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:55 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

[ 1575.417653][ T2979] binder: release 23627:23639 transaction 105 out, still active
[ 1575.443897][ T2979] binder: send failed reply for transaction 105, target dead
03:55:56 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

03:55:56 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000005c0))
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={<r3=>0x0}, &(0x7f0000000640)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r3, @in6={{0xa, 0x4e21, 0x6, @local, 0x4}}, 0x80, 0xbf, 0xffffffff, 0x7f, 0x24}, &(0x7f0000000740)=0x98)
write$cgroup_pid(r2, 0x0, 0x0)
io_setup(0x6, &(0x7f0000000000)=<r4=>0x0)
r5 = request_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)='em1.@\'/[cpusetmd5sum\x00', 0xfffffffffffffff9)
socket$packet(0x11, 0x3, 0x300)
keyctl$revoke(0x3, r5)
io_submit(r4, 0x5, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x7f, r1, &(0x7f0000000040)="2eb1d21365b13b59962d61b984eba7781ea599b6339619ebac9c5a0a058589265203b3fb4ae905be5bcab827631550bb96437ac8d9eceeca8f7873546ddac2e4974462d2fc7b854551b914f07155ebe5cb09ba5b1d9d0286d649a9ecb5f67ad5bd425329b93279e7a9acf918edc32194581a19f362a5dd7bb81fcf85dbc0854d57c4aee6c5f16c57f2ad4362e071ec53574c8b255815d19becdd0d13afc6bf4a2d214508ce0d0ffef540dfda6b3e4b54788da28d24", 0xb5, 0x64e6, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xffffffffffff2834, r2, &(0x7f0000000140)="fbed142c79b1375cec58dca356149091d1d65135e7d068e37317f4a45681e06829c4fadedc573e7ed315d447f36428112da057d15cd91b54ea1ff778c13bc572a5922b56ff1505af8f2ecc808bb0efcc86d5e7e4b7fa379240ee548f06544eb96d2d2dd1043e981dbfed6a0eadec8c07371a84e3783a359baf4e8418d499d3bfe14d90f9c5477482bf4feb69271b54ef1a8b6d6aa074571fad3a63ee5b866ca6bfa8", 0xa2, 0x4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r0, &(0x7f0000000280)="3236442321b2f287ad3f469002fdc14c2719c4e6b7f93c6a44416f6d153947", 0x1f, 0x3, 0x0, 0x1, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000340)="8cafdc1b73267187524d1ecbb2ab65d789c2d3ea38b3aef5778709b154e8814b0f344a4ef7a2263ac976325ac2e3b7629a02c8cf4f669d4cdd7a27a27d85b6a6ad95c93fe01af5b6b1ac3b469d4d", 0x4e, 0x1000, 0x0, 0x0, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0xb1, r0, &(0x7f0000000400)="de31b70b56786b97752187372974524a", 0x10, 0x1, 0x0, 0x2, 0xffffffffffffff9c}])

03:55:56 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000))
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x400, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000180)={0x9e0000, 0x7f, 0x5, [], &(0x7f0000000140)={0xbb0af9, 0x3ff, [], @ptr=0x7fff}})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0)

03:55:56 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

03:55:56 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

[ 1575.953150][ T3180] binder: release 23644:23660 transaction 109 out, still active
[ 1576.030061][ T3180] binder: send failed reply for transaction 109, target dead
03:55:56 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x8000, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={<r1=>0x0, 0x2, 0x30, 0x9, 0x7}, &(0x7f0000000280)=0x18)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r1, 0xfffffffffffffff9, 0x3, [0x6, 0xfffffffffffffff7, 0x28000]}, &(0x7f0000000300)=0xe)
r2 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200300)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4)
ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f00000000c0)={0x9, {0x1, 0x8, 0x200, 0x1}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000180)={0x1fc000000, 0x101, 0x5, {0x0, 0x989680}, 0x81, 0x1000})
tkill(r2, 0x17)

03:55:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

03:55:56 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={<r1=>0x0, 0x3c8f}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={<r2=>r1, 0x9302}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @local}}, [0x600, 0x0, 0x800, 0x5, 0xee6a, 0x1, 0xffffffff, 0x2, 0x0, 0x81, 0x40, 0x4, 0x1, 0x4, 0x4b]}, &(0x7f0000000280)=0x100)
openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000340))
openat$cgroup_ro(r3, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:56 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x4040, 0x0)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
fchdir(r0)
r2 = open(&(0x7f0000000300)='./file1\x00', 0x2040, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58)
openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0xfffffffffffffee0)

03:55:56 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:56 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:56 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

03:55:56 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0xffffffff, &(0x7f0000000040)=0x4)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:56 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0)

[ 1576.283200][ T3180] binder: release 23677:23687 transaction 113 out, still active
03:55:56 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
select(0x40, &(0x7f0000000000)={0x5, 0x4de3, 0x1f, 0x8, 0x3, 0x1, 0xfffffffffffffff9, 0x7}, &(0x7f0000000040)={0x1c00000000000, 0xd1c, 0x7ff, 0x5, 0x9, 0xd2f, 0x97, 0x9b2e}, &(0x7f0000000080)={0xfffffffffffffeff, 0x1d, 0x6, 0x533d7139, 0x2, 0x40, 0x80000000, 0xf3b}, &(0x7f0000000100)={r2, r3/1000+30000})
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, 0x0, 0x26b)

03:55:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

[ 1576.387474][ T2979] binder: send failed reply for transaction 113, target dead
03:55:56 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x100)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{}, {}, {}, {<r2=>0x0}, {}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000280)={r2, 0x3, &(0x7f0000000180)=[0xffff, 0x1, 0x7], &(0x7f00000001c0)=[0x9, 0x5, 0x0, 0x2, 0xffff, 0x2], 0x1, 0x7, 0x1ff, &(0x7f0000000200)=[0x4, 0x800, 0xecd, 0x401, 0x8001, 0x7, 0xff], &(0x7f0000000240)=[0x8, 0x77, 0x2, 0x6, 0x9, 0x2]})
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)
ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f00000002c0))

03:55:56 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:56 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

03:55:56 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

03:55:56 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
socketpair(0x3, 0x804, 0x67c0, &(0x7f0000000000))

[ 1576.602812][ T2979] binder: release 23713:23722 transaction 117 out, still active
03:55:56 executing program 4:
syz_open_dev$audion(0x0, 0x8, 0x100)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1576.652393][ T3180] binder: send failed reply for transaction 117, target dead
[ 1576.794977][ T3180] binder: release 23734:23737 transaction 121 out, still active
[ 1576.820683][ T3180] binder: send failed reply for transaction 121, target dead
03:55:57 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

03:55:57 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:57 executing program 0:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180))
openat$cgroup_ro(r1, &(0x7f00000000c0)='\x82group\x16Q\xc0\x002\x82\x13D\xd6\xaas-7\xbd\xaa5\xbb1K\xd4\x8b\xb3\xef\xa6X', 0x275a, 0x0)

03:55:57 executing program 4:
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

[ 1577.251569][ T3180] binder: release 23744:23753 transaction 125 out, still active
[ 1577.325765][ T3180] binder: send failed reply for transaction 125, target dead
03:55:57 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040)={0xfffffffffffffffd}, 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:57 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

03:55:57 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)

03:55:57 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:57 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

[ 1577.543158][ T2979] binder: release 23769:23780 transaction 129 out, still active
[ 1577.601922][ T2979] binder: send failed reply for transaction 129, target dead
03:55:58 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:58 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000080)={0x5, 0x4, 0x4, 'queue1\x00', 0x4})
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1f, @local, 0x7}], 0x1c)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)

03:55:58 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

03:55:58 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:58 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(r0, 0x0, 0x7ffc, 0x0)
tkill(r0, 0x17)

03:55:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

03:55:58 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x100000001, 0x200, 0x1, 0x80000001}, {0x3ff, 0x7, 0x3ff, 0x80000000}, {0x83a2, 0x1, 0x1, 0xff}, {0x100, 0x5, 0x3, 0xff}, {0x0, 0x8, 0xc45d, 0xdc8}, {0x2591, 0x6, 0x0, 0x7fffffff}, {0x4, 0x800, 0x24b76191, 0x80}]}, 0x10)
fchdir(r0)
prctl$PR_SVE_SET_VL(0x32, 0x39085)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
dup(r0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:55:58 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:58 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

03:55:58 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={<r2=>0x0, 0x37, 0x3, 0x2, 0x2, 0x9}, &(0x7f0000000140)=0x14)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @loopback}}, 0x81, 0x9dc}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:55:58 executing program 2:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x82000, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000880)='/dev/vcs#\x00', 0x4184, 0x400000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/dlm-control\x00', 0x2000, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000900)={r1, r2})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, 0x0, 0x0)
ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f00000000c0)={0x4f, 'syz1\x00'})

03:55:59 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

03:55:59 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:55:59 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:55:59 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x400802, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:55:59 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
fcntl$getflags(r0, 0x1)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4)
ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0))
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9)

03:56:01 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

03:56:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='. \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x200000, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x10, 0xf5a8, 0x27}, {@local, 0x4e20, 0x2001, 0x0, 0x0, 0x8}}, 0x3b)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x5c, @loopback, 0x4e23, 0x1, 'fo\x00', 0x20, 0x2, 0x42}, {@empty, 0x4e22, 0x12007, 0x8, 0x9, 0xb14c}}, 0x44)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={<r3=>0x0, 0x4, 0x1, 0x7}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r3, 0x4, 0x7ff, 0x1, 0x8, 0x30000000}, &(0x7f0000000280)=0x14)
r4 = shmget(0x3, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x1)
shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000340)=""/4096)

03:56:01 executing program 0:
io_setup(0x5, &(0x7f0000000380)=<r0=>0x0)
r1 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x2, 0x80)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x100, 0x0)
io_cancel(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000400)="1feabcff7c0fb472dde7c99ab994c046f6d6d562b4850a3614ca870b5b7a7e3d9adf7c76094300be454dd0edac90d42ab3e4b157d69d18e24fed73f386bafe9822d4f06468c7188ac0f156cd70d7b3c8246b6b33a94a660c16fc8790b513eb024648cb4568dbb1a10a3955ded1df5b8d7f345164cc1788782582ba3fec7a4219aefa1c", 0x83, 0xb9, 0x0, 0x1, r2}, &(0x7f0000000540))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={<r3=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, 0xfffffffffffffff7, 0x6ae}, &(0x7f0000000640)=0x90)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000680)={r3, 0x800, 0x1000, 0xffffffffffff0bd2}, &(0x7f00000006c0)=0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200, 0x0)
syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3f7f, 0x200000)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={<r6=>0x0, 0x7, 0x8, 0xffffffffffff6a13, 0xffffffffffffb2e2, 0x7fffffff, 0x0, 0x2, {<r7=>0x0, @in6={{0xa, 0x4e21, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}}, 0x7, 0xcf14, 0x40, 0x4, 0x2d3}}, &(0x7f0000000080)=0xb0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x1000, 0x9, 0x1e7, 0x1, 0x61a}, 0x14)
openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000200)={r7, 0x1}, 0x8)

03:56:01 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:01 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:56:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
r3 = getpgid(0xffffffffffffffff)
socket$bt_bnep(0x1f, 0x3, 0x4)
ioprio_get$pid(0x0, r3)
write$cgroup_pid(r2, 0x0, 0x0)

03:56:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

[ 1581.214435][T23870] binder_alloc: 23856: binder_alloc_buf, no vma
[ 1581.248039][T23870] binder: 23856:23870 transaction failed 29189/-3, size 24-8 line 3035
03:56:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

03:56:01 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:01 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x56c, 0x66800)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x8000, 0x400, 0x3, 0x80000001, 0x1b, 0x0, 0x7, 0x3f, 0xffffffff80000000, 0x1f, 0x8, 0x7af})
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={<r3=>0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x9, @remote, 0xbc0}}, 0x3, 0x100000000, 0x6, 0x9, 0x6}, &(0x7f0000000140)=0x98)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r3, 0x9, 0x0, 0x1ff, 0x4, 0x0, 0xb0d, 0x3f, {r4, @in={{0x2, 0x4e24, @multicast2}}, 0x6, 0x7, 0xfffffffffffffe01, 0x4e1a, 0xeb40}}, &(0x7f0000000180)=0xb0)

[ 1581.279213][T23870] binder: 23856:23870 Release 1 refcount change on invalid ref 1 ret -22
03:56:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

03:56:01 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x3, r0})
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/21)

[ 1581.323915][T23870] binder: 23856:23870 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x32)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0xfffffffffffffebc)

03:56:01 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:01 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

03:56:02 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:02 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)

03:56:02 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./ \xa4\n\xeb\xb5r\f\x10\xda\xeb\x1d\xa7\ncgr\x00\xff\xff\xff\x9e\xc0\xc0,\x8eQ\xe5#\xd0p\xeb\x02\xd4%\xde\xbb\xca\x1f\x13', 0x200002, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f0000000140)=""/245, 0xf5, <r1=>0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x101400, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280))
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

03:56:02 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:02 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

03:56:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

03:56:02 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
r3 = semget(0x2, 0x3, 0x8)
semctl$SETVAL(r3, 0x6, 0x10, &(0x7f0000000000)=0x80)

03:56:02 executing program 1:
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:02 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

03:56:02 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)

03:56:02 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3ff, &(0x7f0000000480)=""/4096)
fchdir(r0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x8, 0x4)
getpid()

[ 1582.167962][T23939] binder_alloc: 23925: binder_alloc_buf, no vma
[ 1582.196058][T23939] binder: 23925:23939 transaction failed 29189/-3, size 24-8 line 3035
[ 1582.257548][T23946] binder: 23925:23946 Release 1 refcount change on invalid ref 1 ret -22
[ 1582.307847][T23939] binder: 23925:23939 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:03 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

03:56:03 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = getgid()
r2 = getegid()
setregid(r1, r2)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x40)
ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4)
r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, 0x0, 0x0)

03:56:03 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x80000000)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:03 executing program 1:
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:03 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x17)

03:56:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

03:56:03 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x5, 0x0, [{0x4, 0x4, 0x100000000000000, 0x8, 0x3ff}, {0xc0000000, 0x1ff0, 0xca9, 0x9, 0x5}, {0x40000001, 0x7fff, 0x5, 0x2, 0x101}, {0x4, 0x6, 0x5, 0x7ff, 0x8}, {0xc0000000, 0x6, 0x9edf, 0x103, 0x7}]})
r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
r5 = fanotify_init(0x0, 0x0)
fanotify_mark(r5, 0x11, 0x2, r4, 0x0)
read(r5, 0x0, 0x0)
r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r7 = dup2(r6, r5)
write$P9_RLERROR(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='f'], 0x1)
recvfrom$rose(r7, &(0x7f0000002400)=""/4096, 0x1000, 0x40000103, &(0x7f0000000440)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x100000001}, 0x8)
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x2})
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000240)=0x68)
io_setup(0x80000000, &(0x7f0000000000)=<r8=>0x0)
io_cancel(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000000480)="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", 0xfffffffffffffce8, 0x2, 0x0, 0x3, r2}, &(0x7f0000000080))
r9 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000380)={0x1, 0x39c}, 0x8)
write$cgroup_pid(r9, 0x0, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10)

03:56:03 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x41, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x8, 0x4}, 0x1}}, 0x18)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:03 executing program 1:
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

[ 1583.081876][T23981] binder_alloc: 23970: binder_alloc_buf, no vma
[ 1583.094795][T23981] binder: 23970:23981 transaction failed 29189/-3, size 24-8 line 3035
[ 1583.112470][T23981] binder: 23970:23981 Release 1 refcount change on invalid ref 1 ret -22
03:56:03 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 1583.172558][T23988] binder: 23970:23988 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:04 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:04 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='\x98\xf8\x8f\x85W\x1dB\xf3\x00\xc0\xe3\xc9\xf7\xab{t?\xb90\'\x02\xedZ\xaey\x04\x14\x18\x87\xef\x04\xf6\x8d\xda\xbd\xbbl\x02\x13\x19\xde\x89\xd9\x16\x85M\xe3\xd1\xc1\x96\xc7\xde\x85t\x14\xbdZv\xc2+G\x98\xda\x99\x160{\xfb\xd6\xae\xe5\\\x87\x05\xd9\xc1\x94ZM\x8e\xbcid;\f\x87\x14-\xfajX\xea\xce?\x89 ?\xc9\xa9\xeaa\xc5', 0x200002, 0x0)
r1 = dup2(0xffffffffffffff9c, r0)
recvfrom$packet(r1, &(0x7f0000002c00)=""/201, 0xc9, 0x40000100, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002800)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000002900)=0xe8)
syz_mount_image$erofs(&(0x7f00000001c0)='erofs\x00', &(0x7f0000000200)='./file0\x00', 0x9, 0xa, &(0x7f0000002700)=[{&(0x7f0000000240)="cf4728abb5217039521ca4fc56910763e4b6b6f3a32ecbc5aae62e46580d2689ba33393a7c43909c5de7fca26c6bfc4a0245e81aa78d6a6bfdebee748fa2dfc4457aa29d9acfb41718cff7b50d7cc9730e511226958d5e7d782ae20aea94b8bd9209bb29d231e482226c8271b5c138bb61b1477b", 0x74, 0x8}, {&(0x7f00000002c0)="69fc57adbbb305ebbd905b6f1475022fb538af3c6e1bd91d4e763601818ebf40a8bced6fcc796dbdf8bfb53becb56a38675ecd6527cd3880865bdf981e1ef72720cceb4e1fb33bf5e0ed47afb3030518e42611cb0337d827e06d5dc71c1d0c07c81b2625ed258e22cce9ffb46fd8d43cddcc4ea48ae571c4571e46278d3fab742babcd96086f8d5e5326aec91701b7cb0ca0c05ff3356f5012698994adbe777c35c6b6c3a3770e6d39e6dacb0512651f7a3e2b5cb9af07a199c35f8b0710e1676c17ddae6647d5537c70f7587078936a75", 0xd1, 0x5}, {&(0x7f00000003c0)="ce0de8ddeea2540a56dea1859995ba4d79e2c360beb79c4eb8809df0f189ca5eb7dc1ee03b72b82ec38fc3e1c5dc95e0bba62784bfc66c0ee08f8c5053c29665983b6480cff16a565551924be7f9562233da39be59f2ef0e01a1d1cadecbdd6e849dff3c01a5aea12a33afa5add020d07815e137b66112f8e80396e3fa9b287aae10154a9c0db17e1cf93f98ba082e65029e29c9ca2f37ea91a231ab7287f74fb994c7852883952eb3a0f8953c647f87f5d21a1dd5729c3279056c61f055fe4ac8b861ba502b2fb235658a8f9f7d55ae19bb54eb5ad0", 0xd6, 0x3}, {&(0x7f00000004c0)="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", 0x1000, 0x51a3}, {&(0x7f00000014c0)="0ba7391fb8056442e4c46c56dc", 0xd, 0x3ff}, {&(0x7f0000001500)="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", 0x1000, 0x5}, {&(0x7f0000002500)="e1ff002388335385f170a0628118cec97024c12a64dd006a3c2efa7011c6a395ff881ab505b4325e2f29228deabc99bea9fc4380df7215d80dd77e515899c44656cc30d91eac", 0x46, 0x3}, {&(0x7f0000002580)="c15c498aee5175c1224558950f25f5ddd306b163425737cde5835465262eae2c19012178648eaa4b431fe1717b2162c383e2e887bc68d42bb5862805e6aa4bd492ba4be5225548e8bcfc45f9ac7fd8a766a90d2e8b1b601b3bfaa204e6828b3ac1a54b54ca7a6429c90f8becd9ff6e58dd14f04a41e3f8ce2347f6f8591aae7dd0c37f69811d11382a9dc612cf877353928b8fd0e3", 0x95}, {&(0x7f0000002640)="073596c2cae6359ee725274f8a62c065d971cf3b52726356f0a84794967c12cdd72560438bac888b987b49e284168110e813b755fcfe5bc263cf8dc4e5f2dee620f10fef181f04be55fc113ced98da3655faeb87d844abd474fafb0f33a4adb2820186aa55a5150c9e9f0517826fef9c8f180d105c", 0x75, 0x9}, {&(0x7f00000026c0)="878da26cc2ed9499083a61cfdcacdc911feac098a0a35398d134130c41eff74d4584527190c05a92c2b2d38e91cb29de4a27770a07c3a48575a36a38de540620", 0x40, 0x1}], 0x200000, &(0x7f0000002940)={[{@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x4}}, {@nouser_xattr='nouser_xattr'}], [{@seclabel='seclabel'}, {@uid_lt={'uid<', r2}}, {@appraise='appraise'}]})
openat$cgroup_ro(r0, &(0x7f00000029c0)='cgroup.stat\x00', 0x275a, 0x0)

03:56:04 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

03:56:04 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x17)

03:56:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

03:56:04 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x2, 0x1, 0x3, 0x2, 0x8001, 0x4}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x10001, 0x200})
write$cgroup_pid(r2, 0x0, 0x0)

03:56:04 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

[ 1583.939658][T24009] erofs: read_super, device -> /dev/loop0
[ 1583.978925][T24009] erofs: options -> user_xattr,fault_injection=0x0000000000000004,nouser_xattr,seclabel,uid<00000000000000000000,appraise,
03:56:04 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0xfffffffffffffd23)

03:56:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

[ 1584.013966][T24029] binder_alloc: 24011: binder_alloc_buf, no vma
[ 1584.031609][T24029] binder: 24011:24029 transaction failed 29189/-3, size 24-8 line 3035
[ 1584.059691][T24033] binder: 24011:24033 Release 1 refcount change on invalid ref 1 ret -22
03:56:04 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

[ 1584.087460][T24009] erofs: cannot find valid erofs superblock
03:56:04 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

[ 1584.129137][T24029] binder: 24011:24029 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1584.166195][T24041] erofs: read_super, device -> /dev/loop0
[ 1584.199003][T24041] erofs: options -> user_xattr,fault_injection=0x0000000000000004,nouser_xattr,seclabel,uid<00000000000000000000,appraise,
[ 1584.280628][T24041] erofs: cannot find valid erofs superblock
03:56:05 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:05 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54)
write$cgroup_pid(r2, 0x0, 0x0)

03:56:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

03:56:05 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:05 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={<r1=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000140)={r1, 0x3})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)

03:56:05 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x17)

03:56:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

03:56:05 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xff, 0x200040)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0x5, 0x0, [], {0x0, @reserved}})
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0x8b2, {{0xa, 0x4e20, 0x9, @mcast2, 0x6}}}, 0x88)
openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)

03:56:05 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)

03:56:05 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:05 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
sysfs$2(0x2, 0x1ff, &(0x7f0000000000)=""/136)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x6, r1, 0x1})
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
recvfrom$llc(r1, &(0x7f0000000280)=""/122, 0x7a, 0x10040, &(0x7f0000000340)={0x1a, 0x1, 0xa94, 0x0, 0x5720, 0x2, @random="1bc9b43643ce"}, 0x10)
mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x10001, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x9}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, 'cgroup.procs\x00'}}]})
sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x2, 0xb, 0x20, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x3}, [@nested={0x40, 0x45, [@generic="bc00aa2d82c4", @generic="bea79e9ea28714527858aa9713d2be4786c63f959037969705a283f45e7a96acb1128b5bb11a383873824b5c", @typed={0x8, 0x2c, @ipv4=@loopback}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4081)

03:56:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

[ 1584.928861][T24080] binder_alloc: 24062: binder_alloc_buf, no vma
[ 1584.962608][T24080] binder: 24062:24080 transaction failed 29189/-3, size 24-8 line 3035
[ 1585.030401][T24085] binder: 24062:24085 Release 1 refcount change on invalid ref 1 ret -22
[ 1585.081849][T24080] binder: 24062:24080 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:05 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:05 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:05 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x441, 0x48)
write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x17, 0x5, 0x7}, {{}, 0x1f, 0x2, 0xf8ac}], 0x30)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0x6})
syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2)
setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000005c0)={0x100, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

03:56:05 executing program 0:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='puaScX\x89T\x15)g\xb1m\xb0\x8f\xde\x02\x03\xe8\x11\xcat.\x04sage_perc\x00\x00', 0x275a, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x2000000000000003)

03:56:05 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

03:56:05 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x0)

03:56:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

03:56:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x4000040)
r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
signalfd(r3, &(0x7f0000000000), 0x8)
write$cgroup_pid(r3, 0x0, 0x0)

03:56:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:06 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2)
write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7)
r1 = msgget(0x0, 0x110)
msgrcv(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000094a3ffde4a448e0d117d4ae2d0885da4e02fbca04da4fd185f03332e94709f7fb048a7d214cf7288fb98c305aae1a2417d682990a191ffb055fa90dbee2314b8b0a4e223f3c37960"], 0x54, 0x2, 0x2800)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r0, 0x1, 0x1000000000000, 0x75b4694acb33ce9e})
fcntl$getflags(r0, 0x40b)

03:56:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

[ 1585.850509][T24122] binder_alloc: 24113: binder_alloc_buf, no vma
[ 1585.863034][T24122] binder: 24113:24122 transaction failed 29189/-3, size 24-8 line 3035
03:56:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x10000, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

[ 1585.912325][T24128] binder: 24113:24128 Release 1 refcount change on invalid ref 1 ret -22
[ 1585.970434][T24122] binder: 24113:24122 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:06 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

03:56:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:56:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:06 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x802, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x4000)
pread64(r0, &(0x7f0000000140)=""/135, 0x87, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x2, 0x7, 0x4, 0xad2e, 0xfffffffffffffffc, 0x80000001})

03:56:06 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x0)

03:56:06 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

03:56:06 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
r5 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r6, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)
write$cgroup_pid(r5, 0x0, 0x0)

03:56:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

03:56:07 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bind$tipc(r0, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
r1 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='%em0fvboxnet0!\x00', 0xffffffffffffffff)
keyctl$get_keyring_id(0x0, r1, 0x6)

03:56:07 executing program 3:
clone(0x9807ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x0)

03:56:07 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

[ 1586.754167][T24167] binder: 24152:24167 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1586.766540][ T3180] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1586.786423][ T3180] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1586.832900][ T3180] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1586.871263][ T3180] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1586.899170][ T3180] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1586.913513][ T3180] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1586.921203][ T3180] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1586.930222][ T3180] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1586.961423][ T3180] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1586.999749][ T2979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1587.038092][ T2979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1587.060836][ T2979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1587.069030][ T2979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1587.076885][ T2979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1587.084986][ T2979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1587.092449][ T2979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1587.099930][ T2979] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1587.108755][ T2979] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
03:56:07 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x10000, 0xf2)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x10001)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x4400000000000003, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000340)=""/68)
r2 = dup(r1)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
preadv(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/52, 0x34}], 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000300)=0x7, 0x4)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240), 0x4)
r3 = syz_open_procfs(0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0xffffff17)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000700)=0x8, 0x4)
setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000005c0), 0x10b)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)={0x28, 0x1c, 0x17, 0xf, 0x6, 0x101, 0x4, 0x15f, 0x1})
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000100)=""/125)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x6, 0x7})
getrlimit(0x0, 0x0)
mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x20141042, 0x0)
ftruncate(r4, 0x80080)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2008000fffffffe)

03:56:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

03:56:07 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:07 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='\x92\xe8\x92>\xa7\x02\x96\xb3\x12$\xcc\xb9\xb3\xcc\xbb\x95\xd4c\xf5\x7fmt\x97\xe5\x1f\x01\x01\x00\x00/Vo]\xdf\xee\xc8\n\xe9l\x8e\xae\xffJ\x86\xb5\x15|2<H\x1a\"&\xe7!d\xbd\xf7l\x87\xa2|e\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="0300060001fc0433bf7e191cf78884007a674297fc00ed3ace6cfa7fc3840a05a2673aa571ce547f2bcd298c4aed69e2b5b1d78581a68d20"], &(0x7f0000000040)=0x14)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x8, 0x3}, 0xc)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x4}, 0x8)

03:56:07 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:56:07 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

[ 1587.502914][ T2979] binder: release 24152:24161 transaction 145 out, still active
[ 1587.515208][ T2979] binder: undelivered TRANSACTION_COMPLETE
[ 1587.521270][ T2979] binder: send failed reply for transaction 145, target dead
03:56:07 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000040)=""/44, &(0x7f0000000080)=""/221, &(0x7f0000000180)=""/65, 0x4})
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x21cf, 0x3, 0x2a8, 0x7, 0x6})

03:56:07 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

03:56:07 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x400000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in6=@mcast2, 0x4e22, 0x6, 0x4e23, 0x3f, 0x2, 0x0, 0x20, 0x3a, r1, r2}, {0xff, 0x200, 0xdb, 0x6, 0x86f, 0xb5, 0x8001}, {0x9, 0xa610, 0x401, 0x80000001}, 0x401, 0x6e6bb1, 0x2, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x0, @in6=@local, 0x3507, 0x7, 0x1, 0x7f, 0x40, 0x3f, 0xffffffffffffff01}}, 0xe8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)

03:56:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

[ 1587.655443][T24206] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
03:56:08 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

[ 1587.726857][T24219] binder: 24209:24219 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:08 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x10000, 0xf2)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x10001)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x4400000000000003, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000340)=""/68)
r2 = dup(r1)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
preadv(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/52, 0x34}], 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000300)=0x7, 0x4)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240), 0x4)
r3 = syz_open_procfs(0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0xffffff17)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000700)=0x8, 0x4)
setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000005c0), 0x10b)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)={0x28, 0x1c, 0x17, 0xf, 0x6, 0x101, 0x4, 0x15f, 0x1})
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000100)=""/125)
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0xf, 0x6, 0x7})
getrlimit(0x0, 0x0)
mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x20141042, 0x0)
ftruncate(r4, 0x80080)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2008000fffffffe)

03:56:08 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:08 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:08 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgrou\xb1\xc0UNn\x8f\x89U', 0x2, 0x0)
write$cgroup_pid(r1, 0x0, 0x0)

03:56:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

03:56:08 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='\x85\x99\xf3\xa4\xcf\'\xc2\xda', 0x200002, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000140)={0x0, <r2=>0x0}}, 0x10)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000080)='vmnet0\x00', 0x7)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r2, 0x4}, 0xc)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:08 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(0x0, &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

[ 1588.472714][    T5] binder: release 24209:24212 transaction 149 out, still active
[ 1588.480398][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1588.488391][    T5] binder: send failed reply for transaction 149, target dead
03:56:08 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc0285628, &(0x7f0000000080)={0x1000000})

03:56:08 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0x108, 0x1ff, {"aa7dc08fae0b6f9bf3c59f4eb0b2574b2d5018f31ce879c18480a66d317ebc16a9d0e69242c549b931484e077e9318b68fb852fafcfca83efc699ded58a109934fac5adbdd05b10cbb514540d2517500840b001cb004ec99c628b1aeaa6d8f0be29328a29ec5a19440ecd04856482465385bd0176ee6f739a8dd7c6ed860e923952ba37f972b9c4cccdf778caf7b15e701687a5a1786fe072919247b4bdc4505f28352bf5ee9fd4b837b83a58bcbe8d46cb9e33d27863c7226bc075f1724b2aa78fc4caf6df9d7b1228aa7a5a66d072c749c83fc10586b380e759049e18a8ef28730b43e1da779b82b021c3d43e4"}}, {0x0, "cb1f851fc1bd85e96434ed7918f6d7483b2eaa07fc1852a7698ff804b08e2a6a2e5bbf3238e310c8266e4b850df60f374858d41b59d6bb7dfb4cdd4d663bcde2d235ab4a896701e147198502fc40682d04f836826675cd92b300e6aaf5d08789d9166638e496c8c71d7ac7debd494a141d3b7e1647afaa589fa117191b67cddad0f0fdfe1092157708f4d9fd48de63"}}, &(0x7f00000001c0)=""/60, 0x199, 0x3c, 0x1}, 0x20)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:56:08 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

03:56:08 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(0x0, &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:09 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroat\x00\x00\x00\x00\x00\x00', 0x275a, 0x0)

03:56:09 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x610, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)

03:56:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

[ 1588.679983][T24261] binder: 24251:24261 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

03:56:09 executing program 3:
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180), 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

03:56:09 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x840, 0x8)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0)
ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:56:09 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00\x01\x1e3~\xcfSP\x18I\xac\x00\xef?\xa8)\xc0\xba\xea\xf7Mi\xc7Abc\xcf\xd1\x9b\xa5V\xc9\xb3\x88d2D\xf8v\xd2gs!\xf1DL\xe1\xc0\x91~\x0f\x01\xc44>_g\xf0x\xdb(\xf5UU~\xdd\xa7y\xccE\xc3\x1f\x1b\x93=\a\xd1\xdc\xce\x12\xd3\x94\xe8J\xbe_\xf1\xad*\xd9\xd3\x1en\x93\x10\tCS\xc5\xc28\xd8p\xfd\xeb\x81\xb9\xf1\x91o\x1a\x89\xad\xe1e\xcd\xc4\xef[\xb5\x9c\xe5f\x96^)\xe4c\xa4-*\xed\x05\xc6\xf9\xff\x0e\x99\n\x15\xee&\xd7\xaf\x94P\xac\xeb\xd4\v\xac\xa8\x82B\x7f\xfdR\xa1\x0eq\x9f\x90\x88\xf5', 0x200002, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x800, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4c282, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x2, 0x3, 0x2, {0x3, @pix={0x8, 0x1, 0x44495658, 0x9, 0x7, 0xfffffffffffff0c3, 0x0, 0x8, 0x1, 0x1, 0x2}}})
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000240)=0x8001)

03:56:09 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(0x0, &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:09 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1589.396740][    T5] binder: release 24251:24254 transaction 153 out, still active
[ 1589.414339][ T2979] binder: send failed reply for transaction 153, target dead
03:56:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

03:56:09 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
fcntl$getflags(r0, 0x3)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

[ 1589.508272][T24296] binder: 24289:24296 ioctl c018620b 0 returned -14
03:56:09 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

03:56:09 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./c\xf5royz0\x00\x00\x00\x00L\x06\xda\xa2\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

03:56:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

03:56:09 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

[ 1589.627695][T24303] binder: 24289:24303 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:10 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8400000000000002)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)

03:56:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

03:56:10 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x2000000000000002)
write$P9_RREADDIR(r0, &(0x7f0000000100)={0x2a, 0x29, 0x0, {0x5, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)

03:56:10 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

03:56:10 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:10 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

03:56:10 executing program 3:
syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x1, 0xfffffffffffffffb)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r1})

03:56:10 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xfffffffc, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc040564a, &(0x7f0000000080))

03:56:10 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

03:56:10 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x4, 0x4, 0x1}, 0x7f}}, 0x18)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

[ 1590.289304][    T5] binder: release 24289:24296 transaction 157 out, still active
[ 1590.303052][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1590.308954][    T5] binder: send failed reply for transaction 157, target dead
03:56:10 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lstat(0x0, 0x0)
setgroups(0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)

03:56:10 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

03:56:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

[ 1590.449534][T24358] binder: 24355:24358 ioctl c018620b 0 returned -14
03:56:10 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = getpid()
exit_group(0x0)
wait4(r1, 0x0, 0x80000000, 0x0)

[ 1590.524547][ T2979] binder: release 24355:24365 transaction 161 out, still active
03:56:10 executing program 3:
r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0)

03:56:10 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1000000800000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080))

03:56:10 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

[ 1590.610730][ T2979] binder: send failed reply for transaction 161, target dead
03:56:11 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)

03:56:11 executing program 0:
r0 = socket(0x13, 0x0, 0x2)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x800)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/213, &(0x7f0000000080)=0xd5)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1590.743355][T24386] binder: 24383:24386 ioctl c018620b 0 returned -14
03:56:11 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)

03:56:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

[ 1590.835910][T24393] binder: 24383:24393 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:11 executing program 2:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="cd5f3a8d822a"}, 0x14)
r0 = syz_open_dev$sndpcmp(0x0, 0x3, 0x2)
readahead(r0, 0x6, 0x7)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0)

03:56:11 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="cd5f3a8d822a"}, 0x14)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2)
readahead(r0, 0x6, 0x7)
r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000000))
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd040, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')

03:56:11 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

03:56:11 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0)

[ 1591.543735][    T5] binder: release 24383:24386 transaction 165 out, still active
[ 1591.551537][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1591.621825][    T5] binder: send failed reply for transaction 165, target dead
03:56:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

03:56:12 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

03:56:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010020})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:56:12 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)

03:56:12 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:12 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc0585604, &(0x7f0000000080)={0x2})

03:56:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

03:56:12 executing program 2:

03:56:12 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

03:56:12 executing program 2:

[ 1592.605017][T24430] binder: 24429:24430 ioctl c018620b 0 returned -14
03:56:12 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgr/u\xb6cA\x04\x00\x00\x00\xeasA\x8d\v\x05#\xd0\xee\xb2\xf5\xe1\'\x05\xfa\xd2\xe5c\xefR\xc2(O\xa7\x90MJo\xd5\xfa\xb2y\x97\x1f\x00B\xb0\x1b\xeb\xb3\x93F6qI\xd2C\xf7\x805\x82\x82\xc1&Nr\xb1\xd1\nu@\xd2\x92\xecJF\"2\b\xfd\x90\xa9hT\x953\x039\x19\xed\xe9\x18y\x1b%~\xcb\xd2K6R\x19\xf6\xf1\xf30R\x1e\xe7\xdd\x99\xbf\x83\x8dK\xf8-}G:\xd0\xfb\x16U\xc5`7^\xfe\xf3#\x9cR\xafd\x1e)$\xf02d\xa3\x88y\rg\xd8V\x83\f\xf0CE\xfcs:\xb1\xb3*\xa2\xea\x96\x8c\xb9\x92\xc8\xb3ri\xd6\x19\"\xedb\x85b\xce\x9b\xf5\x10\x17y\xc1<\xe3#\bT\x8a\x8cA\xb6\xa9\xb5\xb4q-0\xe6R\x19\x12\x993\xc2*\xb6\xf6\xab\xb8\xc4H\x8dJ\xcc\xbe=\xc5&\x15\xfey\x87\xe9\xb5t\xcaR{5\x9a\xb1+2\x8ft-R\x1a\x10\xd9\xac\'B\x1c\xb7(\xd5\xc6\xcb\xe8\fEqWW\x8e\xd5\xcc\xe1-`F\xb4\x84\xff\x13^\x959l\x06\xef\xb8\x90\x8a\xe3\x96\t\xebM<(', 0x200002, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:13 executing program 2:

03:56:13 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

[ 1592.730514][T24437] binder: 24429:24437 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1592.874209][ T8564] device bridge_slave_1 left promiscuous mode
[ 1592.880535][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1592.934816][ T8564] device bridge_slave_0 left promiscuous mode
[ 1592.941045][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1593.058739][ T8564] device hsr_slave_1 left promiscuous mode
[ 1593.127181][ T8564] device hsr_slave_0 left promiscuous mode
[ 1593.167019][ T8564] team0 (unregistering): Port device team_slave_1 removed
[ 1593.182559][ T8564] team0 (unregistering): Port device team_slave_0 removed
[ 1593.195707][ T8564] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1593.281716][ T8564] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1593.361010][ T8564] bond0 (unregistering): Released all slaves
[ 1593.382884][T14735] binder: release 24429:24430 transaction 169 out, still active
[ 1593.390531][T14735] binder: undelivered TRANSACTION_COMPLETE
[ 1593.409842][T14735] binder: send failed reply for transaction 169, target dead
[ 1593.494120][T24451] IPVS: ftp: loaded support on port[0] = 21
[ 1593.496877][T24452] IPVS: ftp: loaded support on port[0] = 21
[ 1593.673062][T24452] chnl_net:caif_netlink_parms(): no params data found
[ 1593.712272][T24451] chnl_net:caif_netlink_parms(): no params data found
[ 1593.731470][T24452] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1593.739542][T24452] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1593.748068][T24452] device bridge_slave_0 entered promiscuous mode
[ 1593.759567][T24452] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1593.767256][T24452] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1593.775551][T24452] device bridge_slave_1 entered promiscuous mode
[ 1593.879511][T24452] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1593.898940][T24451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1593.915955][T24451] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1593.929742][T24451] device bridge_slave_0 entered promiscuous mode
[ 1593.951293][T24452] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1593.984464][T24451] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1593.991937][T24451] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1594.000168][T24451] device bridge_slave_1 entered promiscuous mode
[ 1594.017588][T24452] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1594.026015][T24452] team0: Port device team_slave_0 added
[ 1594.055989][T24452] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1594.074446][T24452] team0: Port device team_slave_1 added
[ 1594.082458][T24451] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1594.105612][T24451] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1594.122836][T24452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1594.130992][T24452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1594.245999][T24452] device hsr_slave_0 entered promiscuous mode
[ 1594.283084][T24452] device hsr_slave_1 entered promiscuous mode
[ 1594.333449][T24452] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1594.341184][T24452] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1594.360543][T24451] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1594.371022][T24451] team0: Port device team_slave_0 added
[ 1594.400858][T24451] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1594.420606][T24451] team0: Port device team_slave_1 added
[ 1594.431443][T24452] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1594.438556][T24452] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1594.446153][T24452] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1594.453239][T24452] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1594.474741][T24451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1594.491755][T24451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1594.565967][T24451] device hsr_slave_0 entered promiscuous mode
[ 1594.603038][T24451] device hsr_slave_1 entered promiscuous mode
[ 1594.654480][T24451] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1594.662412][T24451] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1594.683218][T14735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1594.702831][T14735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1594.754345][T24451] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 1594.808590][T24452] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1594.851836][T24452] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1594.861968][T24452] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1594.889313][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1594.903768][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1594.923819][T24452] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1594.930598][T24452] 8021q: adding VLAN 0 to HW filter on device team0
[ 1594.952125][T24451] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1594.977813][T24452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1594.997672][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1595.012431][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1595.030996][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1595.038103][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1595.058575][T24451] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1595.075844][T24451] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1595.084429][T24452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1595.092464][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1595.106211][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1595.114540][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1595.123498][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1595.131728][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1595.138801][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1595.152428][T24452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1595.169895][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1595.182028][T24451] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1595.190531][T24451] 8021q: adding VLAN 0 to HW filter on device team0
[ 1595.211252][T24452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1595.231032][T20254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1595.244355][T24451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1595.255081][T24452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1595.264514][T24451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1595.272246][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1595.280943][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1595.289336][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1595.296412][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1595.304325][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1595.312893][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1595.321285][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1595.329912][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1595.338342][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1595.345418][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1595.355823][T24452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1595.365017][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1595.373719][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1595.381534][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1595.390094][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1595.402208][T24451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1595.411150][T24452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1595.429679][T24458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1595.445308][T24458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1595.463328][T24458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1595.474617][T24451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1595.496027][T24452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1595.507469][T24451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1595.515874][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1595.524986][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1595.534077][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1595.542192][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1595.550778][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1595.561317][T24452] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1595.568497][T24452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1595.580499][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1595.590558][T24451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1595.603425][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1595.625810][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1595.645001][T24451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1595.664590][T24458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1595.683506][T24458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1595.714204][T24451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1595.722243][T24458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1595.737924][T24458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1595.747369][T24452] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1595.756697][T24451] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1595.764147][T24451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1595.776666][T24452] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1595.802198][T24451] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1595.855283][T24451] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1596.294846][T24464] *** Guest State ***
[ 1596.299196][T24464] CR0: actual=0x0000000080010020, shadow=0x00000000a0010020, gh_mask=fffffffffffffff7
[ 1596.309310][T24464] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[ 1596.319258][T24464] CR3 = 0x0000000000000000
[ 1596.324106][T24464] RSP = 0x0000000000000000  RIP = 0x000000000000fff0
[ 1596.330873][T24464] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[ 1596.337989][T24464] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[ 1596.345850][T24464] CS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1596.354951][T24464] DS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1596.364249][T24464] SS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1596.373468][T24464] ES:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1596.382296][T24464] FS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1596.391376][T24464] GS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1596.400480][T24464] GDTR:                           limit=0x00000000, base=0x0000000000000000
[ 1596.409529][T24464] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1596.418621][T24464] IDTR:                           limit=0x00000000, base=0x0000000000000000
[ 1596.427706][T24464] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1596.436771][T24464] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[ 1596.444477][T24464] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[ 1596.453030][T24464] Interruptibility = 00000000  ActivityState = 00000000
[ 1596.460094][T24464] *** Host State ***
[ 1596.464435][T24464] RIP = 0xffffffff811fa100  RSP = 0xffff88802a2e7670
[ 1596.471266][T24464] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[ 1596.478800][T24464] FSBase=00007fdf0221b700 GSBase=ffff8880ae700000 TRBase=fffffe0000033000
[ 1596.487723][T24464] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[ 1596.494702][T24464] CR0=0000000080050033 CR3=0000000051213000 CR4=00000000001426e0
[ 1596.502553][T24464] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360
[ 1596.510375][T24464] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[ 1596.517569][T24464] *** Control State ***
[ 1596.521943][T24464] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[ 1596.529727][T24464] EntryControls=0000d1ff ExitControls=002fefff
[ 1596.536287][T24464] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[ 1596.544339][T24464] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[ 1596.551836][T24464] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002
[ 1596.559544][T24464]         reason=80000021 qualification=0000000000000000
[ 1596.566949][T24464] IDTVectoring: info=00000000 errcode=00000000
[ 1596.575349][T24464] TSC Offset = 0xfffffca684fb2a69
[ 1596.580605][T24464] EPT pointer = 0x00000000a7de801e
03:56:16 executing program 3:

03:56:16 executing program 2:

03:56:16 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

03:56:16 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))
readahead(r0, 0x5b, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x3f, 0x8000)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x200, 0x0, [], {0x0, @bt={0x3, 0x0, 0x0, 0x1, 0x10001, 0x14e, 0x19, 0x10001, 0x3ff, 0x80, 0x5, 0x8, 0x7f, 0x3b, 0x0, 0x8}}})
open(&(0x7f0000000080)='./file0\x00', 0x2, 0x11)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000340)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2})
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
rt_sigreturn()

03:56:16 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:16 executing program 1:

03:56:17 executing program 2:

03:56:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

03:56:17 executing program 2:

[ 1596.665722][T24469] binder: 24468:24469 ioctl c018620b 0 returned -14
03:56:17 executing program 3:

03:56:17 executing program 2:

[ 1596.749990][T24480] binder: 24468:24480 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:17 executing program 1:

03:56:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb)
r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={<r3=>0x0, @in6={{0xa, 0x4e21, 0xfffffffffffffffd, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100}}, 0x8, 0x6ffdc25c, 0x9, 0x80000, 0x10}, &(0x7f00000000c0)=0x98)
write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
listen(r1, 0x3)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={<r4=>r3, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000380)=0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000003c0)={r4, 0x3f, 0x6, 0x9, 0x0, 0x101}, 0x14)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r3, 0x9}, 0x8)

03:56:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

03:56:17 executing program 2:

03:56:17 executing program 3:

03:56:17 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

03:56:17 executing program 2:

03:56:17 executing program 3:

03:56:17 executing program 1:

03:56:17 executing program 0:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
set_tid_address(&(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}, {@mmap='mmap'}]}})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r4 = dup2(r3, r3)
getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000080)=""/127, &(0x7f0000000000)=0x7f)
openat$cgroup_ro(r3, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20000, 0x0)

[ 1597.464488][T14735] binder: release 24468:24469 transaction 173 out, still active
[ 1597.472173][T14735] binder: undelivered TRANSACTION_COMPLETE
[ 1597.484385][T14735] binder: send failed reply for transaction 173, target dead
03:56:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

03:56:17 executing program 2:

[ 1597.515178][T24507] 9pnet: Insufficient options for proto=fd
03:56:17 executing program 2:

03:56:17 executing program 3:

03:56:17 executing program 1:

03:56:17 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

[ 1597.605691][T24515] binder: 24514:24515 ioctl c018620b 0 returned -14
[ 1597.629630][T24515] binder: 24514:24515 ioctl c0306201 0 returned -14
[ 1597.730517][T24521] binder: 24514:24521 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1597.997857][T24519] 9pnet: Insufficient options for proto=fd
[ 1598.392859][T14735] binder: release 24514:24515 transaction 177 out, still active
[ 1598.400538][T14735] binder: undelivered TRANSACTION_COMPLETE
03:56:18 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:18 executing program 2:

03:56:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

03:56:18 executing program 3:

03:56:18 executing program 1:

03:56:18 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
sendto(r1, &(0x7f0000000000), 0x0, 0x4000010, &(0x7f0000000080)=@ax25={{0x3, @null, 0x8}, [@default, @default, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x80)

03:56:18 executing program 2:

[ 1598.444850][T14735] binder: send failed reply for transaction 177, target dead
03:56:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

03:56:18 executing program 1:

[ 1598.510448][T24544] binder: 24543:24544 ioctl c018620b 0 returned -14
03:56:18 executing program 2:

[ 1598.563135][T24549] binder: 24543:24549 ioctl c0306201 0 returned -14
03:56:18 executing program 3:

03:56:18 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

[ 1598.616478][T24549] binder: 24543:24549 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:19 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:19 executing program 2:

03:56:19 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='\x1a\xd1\xd4\x1b\xb0\xbe\xac\xda\xfe\x87\xe4\xed\x7f\xb4\x891\x11\x04EV\xd5\xea\xdd{\xaa\x1e\xcbR\x13\xd02l\xbe\x8d\x9e\xb5\'\x15\xd8\xbbM\x13\x9eN\x96\xd2\xba\xc0?\x93\xf7\xbc\xab[\xdb\xcf\x96\x1c\xa9\xa2\x83\x9a\x9bz\x87\xde\x95\xd6\xdc\x1b4\v{\"@\xfd\x8e\xe4\\\xfb#!\x88A\xa6\x8c\xea\xd1\xfa\xf4\t\xb9\x81\x1a\xb2\x86L5\xde\xd5\x87\xfb\a\x8e4\xe2\x06\xc8\xd4\xcf\xd7\x94\xeeT\xf1sC\x95\xca\x150\x13FZ\f\x82\xc1\x06fT*4\x88\x12\xbf\x1f(\xe6\x98!\x1c\xc6\xac$?%!b$\xea\xd5\x16\xb7\xea\xbf\xf2\xfaU\x02\xd7v\xc19\xde]h\xbf\x1a\x1e\xcaT\x9d\xe6\xcc\xb4\x15\xfc*.\xd1\xf8\xf9\xa0]fU\x10\xad\xf3\xf5@\xbc]_\xf5\xae\x06\x94M\xb6+$\x99\xbc\x00\xcc\xc0^\xe2P\xc6y\xda\x8f\x18C\n\xb2\xdeM\x05\x93\x83e\x89\xa2\xacA\x95\x04mJ\xe5\"\xaa\xde\xf3\x06\xefC2\xf7\xd5\xec\x80\x827\xd9\x94\xc1MV\xf6\xb5\xda\x88\xdc\xc6\xa8L)!6&p\xa1\xb7\x14z\xd3T\xf3*\xffQ0\x18]\xc12\xbciN\x81\x12\xb01w?\x00\x00\x00\x00\x00\x00\x00M\x93!\xac\xb9e\x9e\xb7\xa1\x852 \xf2\xae(\xf1\t\xb0\xf4\x9bZ*\xd9Q\xbb/\x1991\xef\x89Q\x91\xe90\x80%\xaab\xa2|\xd8\xaaO\x85a\r\xd4X\xb9q\xe9/;S\xe3\n\n?`$W\x8dG\xbf\x8b\xd9K\xc3T\x11\x15\x99\x99{$\xe0\x86y\x93H\x16\x1f\xcdC\xd1H\xa4\xb9\x95\xeah\xbc\xa4~\xcd\xcb;+e`.9\n\xd8\xd5\xa7aUj\x97\xad\xa9L\x80\xe20\xb9i2\xd7Z\xd4D\xf3\xcbr8\xeb\x97\x06\vVC\xc2Z)\x17\"\xb5\x1d\xf7\x90U\xc0\xe6X\x8f\nf-\x03F\x19\xe7\xb9\xa2Sv\x84\xd9\xc6%}\xc5\xdb\x89\x84ejA\xa9h\\\x1c\'\x00#\xd4m\x10+\xe3\x04\xff\x03\xca_rV', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:19 executing program 1:

03:56:19 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

03:56:19 executing program 3:

03:56:19 executing program 2:

[ 1599.293502][ T8564] device bridge_slave_1 left promiscuous mode
[ 1599.299799][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1599.312715][T14735] binder: release 24543:24544 transaction 181 out, still active
[ 1599.320363][T14735] binder: undelivered TRANSACTION_COMPLETE
[ 1599.326482][T14735] binder: send failed reply for transaction 181, target dead
03:56:19 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

03:56:19 executing program 2:

[ 1599.390044][ T8564] device bridge_slave_0 left promiscuous mode
[ 1599.404424][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state
03:56:19 executing program 1:

03:56:19 executing program 2:

[ 1599.432457][T24576] binder: 24571:24576 ioctl c018620b 0 returned -14
03:56:19 executing program 3:

[ 1599.476785][T24576] binder: 24571:24576 ioctl c0306201 0 returned -14
[ 1599.569140][T24588] binder: 24571:24588 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1600.221271][T14735] binder: release 24571:24576 transaction 185 out, still active
[ 1600.245262][T14735] binder: undelivered TRANSACTION_COMPLETE
03:56:20 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

03:56:20 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x8100, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$tipc(0x1e, 0x2, 0x0)
getitimer(0x1, &(0x7f0000000200))
bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10)
mknod(&(0x7f0000000000)='./file0\x00', 0xfff, 0x0)
ioctl$void(r0, 0x5451)
lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpSuac\xc0t.usage_q\x82rxpu', 0x0, 0x0)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00')

03:56:20 executing program 2:

03:56:20 executing program 1:

03:56:20 executing program 3:

[ 1600.267174][T14735] binder: send failed reply for transaction 185, target dead
03:56:20 executing program 2:

03:56:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

03:56:20 executing program 1:

03:56:20 executing program 2:

[ 1600.366441][T24601] binder: 24597:24601 ioctl c018620b 0 returned -14
03:56:20 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

03:56:20 executing program 3:

[ 1600.470515][T24608] binder: 24597:24608 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1601.159506][T14735] binder: release 24597:24601 transaction 189 out, still active
[ 1601.185985][T14735] binder: undelivered TRANSACTION_COMPLETE
03:56:21 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:21 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x7, 0x204400)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0xff, @loopback, 0x4e21, 0x4, 'dh\x00', 0x2, 0x3ff, 0x6a}, {@empty, 0x4e24, 0x5, 0x0, 0x6, 0x8001}}, 0x44)
fcntl$setlease(r0, 0x400, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x80000001)

03:56:21 executing program 2:

03:56:21 executing program 1:

03:56:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

03:56:21 executing program 3:

[ 1601.204696][T14735] binder: send failed reply for transaction 189, target dead
03:56:21 executing program 2:

03:56:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

03:56:21 executing program 2:

03:56:21 executing program 3:

03:56:21 executing program 1:

[ 1601.341868][T24633] binder: 24630:24633 ioctl c018620b 0 returned -14
03:56:21 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

[ 1601.453529][T24639] binder: 24630:24639 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1602.128346][T14735] binder: release 24630:24633 transaction 193 out, still active
[ 1602.152707][T14735] binder: undelivered TRANSACTION_COMPLETE
03:56:22 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:22 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0)

03:56:22 executing program 2:

03:56:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

03:56:22 executing program 1:

03:56:22 executing program 3:

[ 1602.174899][T14735] binder: send failed reply for transaction 193, target dead
03:56:22 executing program 2:

03:56:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

03:56:22 executing program 1:

03:56:22 executing program 3:

03:56:22 executing program 2:

[ 1602.324512][T24658] binder: 24657:24658 ioctl c018620b 0 returned -14
03:56:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

[ 1603.065229][T14735] binder: release 24657:24670 transaction 197 out, still active
03:56:23 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:23 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x258, 0x138, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@arp={@remote, @local, 0xffffffff, 0xffffffff, @mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff]}, 0x100, 0x9, 0x4, 0x9, 0x40, 0x3, 'sit0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00'}}}, {{@arp={@local, @rand_addr=0x2, 0xffffff00, 0x0, @mac=@broadcast, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x3, 0x36d0, 0x101, 0x3ff, 0x2, 0x1f, 'bcsf0\x00', 'erspan0\x00', {0xff}, {0xe215d8997a01816e}, 0x0, 0xc8}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x101, 0x7fffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0x8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0)
getsockopt$inet_int(r1, 0x0, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

03:56:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x80000})

03:56:23 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000940)='/dev/rtc0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), 0x0}, 0x20)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200))

03:56:23 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

03:56:23 executing program 3:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x17)

[ 1603.110194][T14735] binder: send failed reply for transaction 197, target dead
03:56:23 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

03:56:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0xf9f4)

[ 1603.251060][T24697] binder: 24691:24697 ioctl c018620b 0 returned -14
03:56:23 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x1, {0x800, 0x0, "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", 0xed, 0x39, 0x20, 0x10000, 0x2, 0x8, 0x1f}, r2}}, 0x128)

03:56:23 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000940)='/dev/rtc0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), 0x0}, 0x20)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200))

03:56:23 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

[ 1603.352479][T24704] binder: 24691:24704 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:23 executing program 1:
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "81182e", 0x44, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788]}, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x543, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0xffffca88}}}}}}}, 0x0)

[ 1604.043058][ T8420] binder: release 24691:24697 transaction 201 out, still active
[ 1604.050740][ T8420] binder: undelivered TRANSACTION_COMPLETE
03:56:24 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

03:56:24 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
pause()
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:24 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
set_tid_address(&(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}, {@mmap='mmap'}]}})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r4 = dup2(r3, r3)
getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000080)=""/127, &(0x7f0000000000)=0x7f)
openat$cgroup_ro(r3, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20000, 0x0)

[ 1604.085091][ T8420] binder: send failed reply for transaction 201, target dead
03:56:24 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

[ 1604.168566][T24730] 9pnet: Insufficient options for proto=fd
[ 1604.191245][T24732] binder: 24729:24732 ioctl c018620b 0 returned -14
[ 1604.983120][ T8420] binder: release 24729:24737 transaction 205 out, still active
[ 1605.026406][ T8420] binder: send failed reply for transaction 205, target dead
03:56:26 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x610, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)

03:56:26 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

[ 1606.746003][ T8564] device hsr_slave_1 left promiscuous mode
[ 1606.787898][ T8564] device hsr_slave_0 left promiscuous mode
[ 1606.850023][ T8564] team0 (unregistering): Port device team_slave_1 removed
[ 1606.862272][ T8564] team0 (unregistering): Port device team_slave_0 removed
[ 1606.875203][ T8564] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1606.927504][ T8564] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1607.041593][ T8564] bond0 (unregistering): Released all slaves
03:56:27 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="d9e12c76fe8ee900c7ec5a3b5b667e6ec9cdb7aef11571f53be4aae66b03d79a7d55d4e3d4d6eeaf454839195fbf14d48af6e585a5579f56869def01eb978201fc19f3a0b9a9eac2e4631d1e1a7cbd48b5ee84e02c3f8ed144c890d1e580b483f496eec64255fcd8a598fd9411b61f533c1f0daec638634c450d63f43bd79d00e72a7a2ac32a7af69d167f230187e469d2afab7dc855dabb70bc44b5a459fa6e1d600e717b95d9e5667d02cc8699b3edbb7f25fc0cdfbf0d68b19706c52045b1bf10b7ec77c36a0cb27f7d401f36505e0cac557dadb4dd0ba1a79ff4885481b774860553b7a2268d9739ee5816ae027fd6b0a7d73e13b2a9fcf7fbe2da5d694ac7cb08e1bf4ace0e3c7e7b88709468a8fc7bffc88c08bde444cfe709dfbfb5eea3175a458e57362eb8d7f54486def0511e0ec86720dd07f4584a6c3b0ffa721e715d0d9d71bbcbd5853ea80f91d9591e3ec96ceb46088f55502ad246a915503a73796ac8f5568bc83cc956652cfb0f8687e1ddbfd64bd61772add393f5fa9ec01528bde3c2e25cd876b9698998b4834ccba6754aa0bda38e4d688351625d6080ac00e4f58fe66c595bd43d460e92635df6a1a1a6373ee8cf0ace72cb483b01433a389440a72f5b9dcc7c9e1221b9f1c5fb16607da68eeebe52acf8ebd0cba30954088e2b71cd649c435dd786381f002b89d15a8070ea22fb22c170c7b1849d4b958aef1120182870f5d31b0df5e63b9827a4fdb5cd0c276d9eb01a1cd5cf8fed1ef9d154a771da8ed331b5b2a09cdf4c131ae51eb7d263b31f270f4f7132241f7a65e02db0ae9e82960fb8dafb5abe84f89511a63d3905e7c59254aad9e0a333006b3f6b7930095641aa662ead278319072a275cdd664bc7ace6afc16803968ddc5bc4b196c5fa1b5facc633520ace28b6faae633b6239e27666ba54211ab67f65bf472ef48b8088f16a879dcd1fa5156f31e010351db8b022eca522c6c21557f3e467e4fc34178d6708638481688f3e6348e75b790b7ca0aa2f71d9e9bfb9d8ef754123a720848bd5d1d0f973b43476b9ff8557804b89d45987137be0328d1e8c9743d6164acf8879258ef760657158caba86fcf1df2590228dd9e12d3a97faa8df9174783819daed1cf13a53262d9c9974777e09847c7b3572263d06225454d3186e9cc1de5ffaed0e8025fe74b2facf223d1e4063589a7a91f2933864a4864f0077d1f00b474266411ac53f41889fae0033cc7436154e2628b446ed631627316270b6b41394049ea22b369f5955b49ba4c3e48e9eb95365cce7d52dc5284086c3981f1e0737be211f764c2e7b39f548d1aa8d3783e0d0b3c3b130b21d5a198fdaf9d567c1e6f4797851d11dd6499d38d0a43e2fd24b893a3b9b597f1f28a466212ba93ed5e4f25914b9098e6d0b847f65bfe2e14baed2f458223257d435e1769df5153eeda5e5a996cd210d448f84c02e3d7b14ff1ada57ecf1d73362a9ac915ffb2e2b4c7cf20dc09ffb9a1e009211095c370366f76b86e607c105f73081a4289fe84c6d21c0d80cf95e5d074edd252d98de86e4da82bc5ed531aa9bbf4785bf335d3669d34e6d969ee77a74fdcc2a4cb645de1879e6f2815ef094ce2ea6997f54da3d4ec5e87fdcdb55e2cdaf2a421681288817c7b42baef19c69c478d0197cd274932c204f631ea6e330ec4921d6986ad55823eefd5175c94f2cd1ae3a60883d23bd41da227a19f25f5836376243b736d73cb28893da293abad5b36325f8fd823a042aeeab35016fee644e48df9f1484660c77b85a591469da2345ec7043c694b46d61d4a03d7bf6f051fde9a41356ae2a33f69dc8d24fb994e3239b836927123aaf2c8d81e2bb70733fc2a00cf478ba753aa7ed27217e9a89ba53f7f008522c045888f1cc3c57df7b753a6de9812a801f34d6417b48ec87da91eb26da746903af28566d53a74b5536971bf48a020cbb243d5cfaf5db4777cc22126ea5abbbc12e7df7f36702e3bbb216c26bc81a10fe5d5fbac9fa5ba51ae17736218342b0b34306e711b4c3acd3ef101bbe48f2569a13d7ebc69be156b2df48d47299224d695ae0a066543f6b3b0890b4705c3a9354b15ad28f014b2e5fe0c26f5d69c5b46deaebd1b62735055fda132b68ffcabce210d8be7e54771dd79db38d8fcfa23733a26d4336d979cf6097555c3a3542ee54cb374e318764eeaca80eac16797e0d2c15ec19ea17412420d76a2dc0d4540d66420dfbb5c8bd7e15ef926767062e2022f94a1f9a473bdb8828f6c6d87755c8340d4f075ae6255f89374fab1ce486763fbe0cd9bbeb12150d951e216fe608b2e418ae4330c53f9922889840c885e9fe3ae771b94e08b57a4211eb22a57fae08f3c4947462794d0aa5c0a947440ff0baf84bca817aa207540477e9c51447b0db8f3a27e06ace1299dd7d8bd063440825b4d17daa393431803d2c5345a09de5d89348735a8658d69d5ccfd7be5b0adc8f6e92ff20bb0fdd268342ad72999f8046dcf502b385e2d527a2c89e8cfb817b9d30753df90ee2721d000789fdae65670d0d8cc65c41884f431e8d6804969abd8011120c1170aca1564e04de460e5a30b5e568c874adc5417bdef68ace52b9d1d6476a6dfba6ebc92d6c793ddb46061bb2862e71027af35ba4b5ab6de2371b3ee97ca16e24a797611b50db34394f2f3b35a073b4aaa28d3acbaaf1b8baa5d80e1bec94443cc41380af0c624b384dbdfea473758f5ee070875003fd65e312aed2db0c4b4c86419fd12c861bfb1730c53a71d92c210cfdc28e8f2f96630f9f89b1b48ab8909434121968cf75997f5a6650c44af12d77a0157ba94c603fc1eb4c59a606103f66c1893c914f73924287761adbedce4cc91a16b5f708fb79cff5db503389e3dd1467488ea916b3e45dd5eed816b007610494ef3825fc48dbfc96d1b3d168ed2c2cb180f48a4cae42d961d12e12316ce59c12bcdb013610743cafd30e9d9fd13a7e9be2cba155f222f3cd1d75b3e71f28eb4f1d08a1ca2006ccaae93d4f55f472a7dcf4c3bc3b0b08a8187a0993b5b3efa0ab0b860ec35e874ab2ce3c684a8c8c9fc1e3b15ba2151e788ff9e6745df98ffa048291969f9fcab23f7bdd209dbd9429a61c4b0f78f9c33d5a687606e85c52a76c66ff5a64d5c617fbb73b7a2fe606dcf80fd89b244eb8d2f6a83b95cd39fbc15973ab3cf168b5620543648babbbaa7c80568fbebb3782e4419a544c6b9b85a2e00e94e152f9bad65277301326b850c76b226bb96ff2c08d17a6b6df6db1c347e27ae16c27a18347a1dd138ce72eb29b38c66f75514f8e7c997baa4619db48b385871e5059236d9de33d619da4308ca0abefe25f43e4820ddb2f1aea93a284bf6171096d69f47e1e7549baa529251836cdc23b08a8541db53212f64adb1c51b3302b37e149a4109f43d6fa1ba5c1c5604c4c62d413a2a496a4e28322d012013a64035e90512de3713161d02ddfcaf536e5ceb0fd0fdd7a10b85a2e644e0ec00e1d01c001bae6dcfb599951f3a85780f93ece814f36980e154637ecdcede490a96a32db828ddd095dab04c328291275c0d4da23b79e3ca0021f03e7d8013b1a8bec07a693bb201a959213756197b721c641b13b1afc4d10ea9b8de90a3f47c54d89fab29a50d2025f16c85a4197fe45f85afce3b1e1c021deaef1a25e7d15a552b0b36fbcd6911179c8f222b0565941093dc1186dc3ec66f414fe184e6bf1faa7b660e7eb5abcb477e92b63a4ce70b6ec08f01a20204e51530c4d606aad8a29ad2605e738518450b386e5e35e380849033424b583908b7d717071e82b888a5dd71c274d98e487de546ab38023f30b919d1d2fa4b4827420b18ea715b74d08b64453ee6f7a1d16aa25faf6aa8459c0b69d02e0bdfc0dc28ef475632c06a797f72c05c5dc44adbee3c1e3839f36687a84528c1b8d7e98ab55985691792021b90c79436570c35768efe07efd2485969564c0a838161e8c7f5e75fd091a5ebdea5e8e2c400c9ff0c3640ca1d60818f04624bd5d6295d6e808a4f807525e287a93bf9f6b0538d41997232621137d4d1a289225a83f712af3597553141d3e8d4cdcfb2217d1a36b677dc2b96c44113f07bbb865ca211a56dd1a4acb1ea00bd15592b89966ea5d41c2a496f23120da47995f256174967b3988df00e92f312bfc3a81bcce8a52740fa7fd2961aed20e8d5c152b09c7ff86917d6795ba84849e13c577caf20e269d0da8019296fb484d3edc663e83068ff717cf3acbdc37f14185a0ab74e6c83ac207a01d62d2cb6f7fd1c86cf843786799f0e7525488a366a570496ab4e855ebacdfac7c1d87fa26bf58eb17eff247f3627fa0d279a83bac61739457a482c26839d005697ab70e4ffdc2b63ee49d5cad904238ffd8ab438db2f5fd81ef8eef38e523b4f16550fccb7a873af05394798fbdd711ba9a422909eb7e8934b47e2d4ed22d4b0eee08678a7ed6456da23dd452eca0b877685e46554e5086cc09415f7cbc6a28df7a619478e2a3cf9b8a1295499b3e02e38244e4d37e585d3eb2d615e35251ca9959c9dc52e182567c8af98fa3c038fb0ef13d5fc7217a7e56bde269aeebe04e31df7ee6e7296c847c63d3e32947be5cf9549ee45bb3fac905146589eec7489b1fee52c21b507a8ee9aea90a7ebe53931e8ed343b49b085c2643146bc6007e77c5a7be3b238a997bda07d118f99f2e53cc2dab2e0fde0d60a25b43e1b66e80964af7749fe531bb334af4a76380644793945ef01b3a56a459ad6ae96239f23d001bc0bc2fe2c41b7081d47baa7cb77dce098abce275ec9c41476996f9e952143f009b183f4e8f8114edf55db7436d5faca984ec1281e93cc1a3fbce7ee0f2dc631d830a354e6e3f97ab8a66a3f553a573cdd882b3f2a15c368f3af518cd1eb5d62509a45762219881ef645b16870e46ab3fed6de61bdf2d5e519ea2cb320e27b6bec75e827006283637bc87048404c8fb98fdfd1ff1b87efe3d15cabd406a0962f2ec85bebea34c5aef6788fb05274f289c091e83ed188afb4ab738fb7f8d6550bd7f3da55242f81d872f0a14f1577de60c7f2b43d9374f1145cd15f8b6074730e56329f47b4eba739f2562d2d8ce3dbb62272f65e06bd166a831bde126870564f56629609b0b1e1152f1e351fc29d99055a36323d4520d85256a2a66565c63f9ec9184e3a1ced7b3303ab18a5c69f2e6b9a9d6c5a1c123d8b870b7c5f11373c82761923b0f439f7aa541587c0e232adb3bc8c698e8446bc18639799f88180797d91dd44d2d7adb4c8a23b385d6a52f70706833ad43e0aacd366e91aae8b55a54994854f864f1259b008e72f5b7d3c79f1e1c0eb3d0c18df53f781c03c0ee2ca875fa917601958719884faa14597f6cede536d1593c17008b0dc57d6c4d57f1e98165e57065706e07854447dcbcb7897442fadf05c6ccc04fdb6999b9ffd2a6afc58b65126c45bbcb7519b03e4074634184844784a87618c08704af509920695caab4e94ab65bf9bb14513c3ba0791b23f3c9aaddfca3684554665caa527ba19f3814de87ad6ecee88df783240685af302797c094c1ae2e790f731b68f8dcff3dde2d48bcf65df56ecd60d3382a38a70726187dcc91b39d4de58fa3926f4b23469bf8f7a95c03b5ed9602e3f65606e7112195004a39cabb23b6211d9dd7eae5300b88a8813cc4f598c39326d417486204d8865ad5e1a0b3c997cf0c53e79436e42228515d211058397fa61c12576562fa80f8ad84175ecc17547e6878320f5592f7898e337a", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
r5 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r6, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)
write$cgroup_pid(r5, 0x0, 0x0)

03:56:27 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)

03:56:27 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

03:56:27 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x610, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)

03:56:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

03:56:27 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
set_tid_address(&(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}, {@mmap='mmap'}]}})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r4 = dup2(r3, r3)
getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000080)=""/127, &(0x7f0000000000)=0x7f)
openat$cgroup_ro(r3, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20000, 0x0)

[ 1607.213738][T24756] binder: 24754:24756 ioctl c018620b 0 returned -14
03:56:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

03:56:27 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
r5 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r6, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)
write$cgroup_pid(r5, 0x0, 0x0)

03:56:27 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000140)=@v2={0x0, 0x0, 0x14, 0x8000, 0xc7, "4e336bc99ab5e54fd19faf9ebf5fdb2dffbb4b332ee94ed2bcf75159db6b3fbfbde90e41d16a0f5597868c462693e3be3c695c41c3d201da8973916dac1ead8b644a33960112873346a84c1bca514e64d3384f3d067acc9282cdc013a34918f152d402f051ff31b09cd02dd6b78d5bbc75447240dbb8db9947d8776088ad5388db4d0a1cb1a62889e57b65af48003163145b9bf0860f1dcbdc288bc8ce90edd50f0e604d68c8a6c723033707889e7b431b6a0434b000367e441a15904772bfaeb0376b2fe9dcc4"}, 0xd1, 0x2)

03:56:27 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x610, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)

[ 1607.319488][T24763] binder: 24754:24763 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:27 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

[ 1607.436303][T24771] 9pnet: Insufficient options for proto=fd
[ 1607.470133][T20266] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
03:56:27 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x610, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)

[ 1607.499716][T20266] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 1607.528979][T20266] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
03:56:27 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
close(r0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x8919, 0x60a3213e, 0x4, 0x0, 0x100000000, 0x3e3}, 0xc)

[ 1607.576014][T20266] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 1607.634247][T20266] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 1607.670366][T20266] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 1607.695736][T20266] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 1607.719799][T20266] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 1607.755328][T20266] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
03:56:28 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

03:56:28 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x610, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)

03:56:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0)

03:56:28 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
r5 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r6, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)
write$cgroup_pid(r5, 0x0, 0x0)

03:56:28 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1608.012961][    T5] binder: release 24754:24756 transaction 209 out, still active
[ 1608.020636][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1608.052449][    T5] binder: send failed reply for transaction 209, target dead
03:56:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

[ 1608.130128][T20266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 1608.146036][T20266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 1608.182855][T20266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
03:56:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:28 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x610, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

03:56:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

[ 1608.227988][T20266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 1608.240214][T24815] binder: 24810:24815 ioctl c018620b 0 returned -14
[ 1608.258733][T20266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 1608.291724][T20266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 1608.304409][T24815] binder: BINDER_SET_CONTEXT_MGR already set
[ 1608.337009][T20266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 1608.348722][T24815] binder: 24810:24815 ioctl 40046207 0 returned -16
03:56:28 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

[ 1608.377425][T20266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 1608.407237][T24819] binder_alloc: 24800: binder_alloc_buf, no vma
[ 1608.433552][T14735] binder: send failed reply for transaction 213 to 24800:24820
[ 1608.446997][T20266] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1608.459648][T24832] binder: 24810:24832 Release 1 refcount change on invalid ref 1 ret -22
[ 1608.466813][T14735] binder: undelivered TRANSACTION_ERROR: 29189
[ 1608.483113][T24819] binder: 24810:24819 transaction failed 29189/-3, size 24-8 line 3035
[ 1608.561042][T24815] binder: 24810:24815 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:28 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:28 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r5, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:28 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

03:56:28 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r2, 0x610, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000804)

[ 1608.658935][T20266] binder: release 24835:24839 transaction 218 out, still active
03:56:29 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

[ 1608.738832][T20266] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1608.759420][T20266] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
03:56:29 executing program 0:
r0 = perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0xcf91, 0x408000000000, 0x6, 0x9, 0x0, 0x6, 0x8010, 0x9, 0x7, 0xfffffffffffffffd, 0x8, 0x2ec, 0x249e9531, 0x2000000000000000, 0x81c4, 0x800, 0x5, 0x1f, 0x4, 0x406, 0x9, 0x9, 0x7ff, 0x6, 0x4, 0x46, 0x5, 0x6, 0x95, 0x0, 0x9, 0x8, 0x1000, 0x64ef, 0x5, 0x60, 0x0, 0x8, 0x1, @perf_config_ext={0x10000, 0x4}, 0x22404, 0x5, 0xefd4, 0x7, 0x4, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x8)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2080, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000080)={0x5, 0x1c, 0x2, 0x13, 0x8, 0x20d, 0x3, 0xae, 0xffffffffffffffff})
fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, <r4=>0x0})
perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x8, 0x20, 0xb5, 0x5, 0x0, 0x3, 0x22220, 0x0, 0x8, 0x800, 0x5, 0xaec, 0x7ff, 0x1, 0xffff, 0x80000001, 0x0, 0x4, 0x1, 0xfffffffffffffffe, 0x7fffffff, 0x9, 0xfff, 0x7, 0xffffffff, 0x0, 0x1082b148, 0x7ff, 0x80000001, 0x100000000, 0x7ff, 0xdfb, 0x100000001, 0xd74, 0x9, 0x800, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x100}, 0x4320, 0x3f, 0x3ee, 0x9, 0x1f10, 0x5, 0x3ff}, r4, 0x9, r3, 0x1)
ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f00000000c0))

03:56:29 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')

[ 1608.812852][T20266] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1608.827969][T24853] binder: 24848:24853 ioctl c018620b 0 returned -14
[ 1608.852564][T20266] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
03:56:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

[ 1608.894146][T24853] binder: BINDER_SET_CONTEXT_MGR already set
[ 1608.921808][T20266] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1608.935426][T24853] binder: 24848:24853 ioctl 40046207 0 returned -16
03:56:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

[ 1608.964163][T20266] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1608.991068][T20266] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1608.991646][T24859] binder_alloc: 24835: binder_alloc_buf, no vma
[ 1609.003522][T20266] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1609.016737][T24869] binder: BINDER_SET_CONTEXT_MGR already set
[ 1609.028000][T24869] binder: 24855:24869 ioctl 40046207 0 returned -16
[ 1609.036045][T24853] binder: 24848:24853 Release 1 refcount change on invalid ref 1 ret -22
03:56:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

[ 1609.065416][T14735] binder: send failed reply for transaction 218, target dead
[ 1609.074438][T20266] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1609.110363][T24872] binder: 24855:24872 transaction failed 29189/-22, size 24-8 line 2896
[ 1609.111077][T24869] binder: 24855:24869 Release 1 refcount change on invalid ref 1 ret -22
[ 1609.176529][T24859] binder: 24848:24859 transaction failed 29189/-3, size 24-8 line 3035
[ 1609.210604][T24874] binder: 24848:24874 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1609.222062][T24869] binder: 24855:24869 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:29 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:29 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)

03:56:29 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00\x00\x00\x00\x00\x10\x00\x00\x02', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r2, 0x3, 0x6, @local}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:29 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

[ 1609.369558][T24889] device syz_tun entered promiscuous mode
[ 1609.409497][T24893] binder: 24890:24893 ioctl c018620b 0 returned -14
[ 1609.453197][T24883] device syz_tun left promiscuous mode
[ 1609.482053][T24896] binder: 24890:24896 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:30 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:30 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

03:56:30 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)

03:56:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgrou\x8f\x11{\r\x1f]\xe9p\x00\xa7R\xe3\x942:\x13\xce\xab\xd8\xfc\xd4\v\xa1t\xed\x96\xde\n\xdc\v<rg\xec\xf8p\'\xce\xec\x0e\x9ey\x04\x12/:\xc6\'V\xaay\x0e,9\x1f\xfd\xa7\xe85qc\xb7/\xdb[M\x97\xda7\xd1e\x9d', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

03:56:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1609.976059][T24917] binder: BINDER_SET_CONTEXT_MGR already set
[ 1609.982097][T24917] binder: 24905:24917 ioctl 40046207 0 returned -16
[ 1610.014408][T24917] binder: 24905:24917 Release 1 refcount change on invalid ref 1 ret -22
03:56:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

03:56:30 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)

03:56:30 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:30 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000001140)={0x1, @null, @rose={'rose', 0x0}, 0x7fff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]})
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="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")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1610.202823][    T5] binder: release 24890:24893 transaction 224 out, still active
[ 1610.210496][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1610.242274][    T5] binder: send failed reply for transaction 224, target dead
03:56:30 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})

[ 1610.284453][    T5] binder: send failed reply for transaction 227 to 24905:24917
03:56:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

[ 1610.341067][T24924] Unknown ioctl 35084
[ 1610.349212][    T5] binder: undelivered TRANSACTION_ERROR: 29189
[ 1610.363101][T24924] Unknown ioctl -2142735306
[ 1610.381812][T24928] binder: 24927:24928 ioctl c018620b 0 returned -14
[ 1610.390669][T24924] Unknown ioctl 35084
[ 1610.399844][T24930] Unknown ioctl -2142735306
[ 1610.468054][T24937] binder: 24927:24937 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:30 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:30 executing program 3:
lseek(0xffffffffffffffff, 0x0, 0x1)

03:56:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

03:56:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x2)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2})

[ 1610.525789][T24939] binder: BINDER_SET_CONTEXT_MGR already set
[ 1610.531834][T24939] binder: 24932:24939 ioctl 40046207 0 returned -16
[ 1610.547144][T24939] binder: 24932:24939 Release 1 refcount change on invalid ref 1 ret -22
03:56:30 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

03:56:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

03:56:31 executing program 3:
lseek(0xffffffffffffffff, 0x0, 0x1)

03:56:31 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x4, 0x60c3, 0xbfa, 0x8, 0x7, 0x6, 0x7, {<r2=>0x0, @in={{0x2, 0x4e22, @loopback}}, 0x1000, 0x80, 0x4, 0x1, 0x9}}, &(0x7f0000000000)=0xb0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x3}, &(0x7f0000000280)=0x8)

03:56:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

03:56:31 executing program 3:
lseek(0xffffffffffffffff, 0x0, 0x1)

[ 1611.179701][    T5] binder: release 24927:24928 transaction 231 out, still active
[ 1611.189903][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1611.204772][    T5] binder: send failed reply for transaction 231, target dead
[ 1611.228775][    T5] binder: send failed reply for transaction 234 to 24932:24939
03:56:31 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})

03:56:31 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1611.273535][    T5] binder: undelivered TRANSACTION_ERROR: 29189
[ 1611.360975][T24975] binder: 24974:24975 ioctl c018620b 0 returned -14
03:56:31 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:31 executing program 0:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5cc, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='\x90emory.stat\x00\xa6X\x16c\xc4T,a?\xeax\xb7D\x9dIY1\xe8E?\x1a\xae\xa6\xc0\xd7\x88\b\f1Q\x02\x89\xff7\\%c\x03\xd9\x91\x96', 0x275a, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe11}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60fe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x72c2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48800}, 0x20000800)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000000c0)={{0x8, 0xfff}, {0x6, 0x1000}, 0x5, 0x3, 0xa89})

03:56:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

03:56:31 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r0, 0x0, 0x1)

[ 1611.415129][T24978] binder: 24974:24978 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1611.433862][T24979] binder: BINDER_SET_CONTEXT_MGR already set
[ 1611.439943][T24979] binder: 24976:24979 ioctl 40046207 0 returned -16
[ 1611.447869][T24979] binder: 24976:24979 Release 1 refcount change on invalid ref 1 ret -22
03:56:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

03:56:31 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:31 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r0, 0x0, 0x1)

03:56:31 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x384fd6a4, 0x200)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)="305fafa1d29ae85cf4261bd3866ee49dd428632999b7cea32a5d0fe5e4ae0d316212a3cd7e32f27946018f0c640548bb1d59284f093045a4e263b956628235192d6007109b5781db547c0a225682bbdd4c5a2f85cd5b58a2dbd0a76d8ba1280ef951bad26002ad64863b559b27a58322362b2d2c8cefb0b33f376fd35b51bc7c348bdeba71908d1ffa0c50c1312f3625a0a1acbaf4f366ebc8aa4cb61e9a18e44850af2ec9220491bc11e5ffd7446ef5a852d4c2f854cff5111a8329abbd3f973aecfc7246c354d108")
ioctl$NBD_DISCONNECT(r1, 0xab08)
getpid()

03:56:31 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

03:56:31 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="d9e12c76fe8ee900c7ec5a3b5b667e6ec9cdb7aef11571f53be4aae66b03d79a7d55d4e3d4d6eeaf454839195fbf14d48af6e585a5579f56869def01eb978201fc19f3a0b9a9eac2e4631d1e1a7cbd48b5ee84e02c3f8ed144c890d1e580b483f496eec64255fcd8a598fd9411b61f533c1f0daec638634c450d63f43bd79d00e72a7a2ac32a7af69d167f230187e469d2afab7dc855dabb70bc44b5a459fa6e1d600e717b95d9e5667d02cc8699b3edbb7f25fc0cdfbf0d68b19706c52045b1bf10b7ec77c36a0cb27f7d401f36505e0cac557dadb4dd0ba1a79ff4885481b774860553b7a2268d9739ee5816ae027fd6b0a7d73e13b2a9fcf7fbe2da5d694ac7cb08e1bf4ace0e3c7e7b88709468a8fc7bffc88c08bde444cfe709dfbfb5eea3175a458e57362eb8d7f54486def0511e0ec86720dd07f4584a6c3b0ffa721e715d0d9d71bbcbd5853ea80f91d9591e3ec96ceb46088f55502ad246a915503a73796ac8f5568bc83cc956652cfb0f8687e1ddbfd64bd61772add393f5fa9ec01528bde3c2e25cd876b9698998b4834ccba6754aa0bda38e4d688351625d6080ac00e4f58fe66c595bd43d460e92635df6a1a1a6373ee8cf0ace72cb483b01433a389440a72f5b9dcc7c9e1221b9f1c5fb16607da68eeebe52acf8ebd0cba30954088e2b71cd649c435dd786381f002b89d15a8070ea22fb22c170c7b1849d4b958aef1120182870f5d31b0df5e63b9827a4fdb5cd0c276d9eb01a1cd5cf8fed1ef9d154a771da8ed331b5b2a09cdf4c131ae51eb7d263b31f270f4f7132241f7a65e02db0ae9e82960fb8dafb5abe84f89511a63d3905e7c59254aad9e0a333006b3f6b7930095641aa662ead278319072a275cdd664bc7ace6afc16803968ddc5bc4b196c5fa1b5facc633520ace28b6faae633b6239e27666ba54211ab67f65bf472ef48b8088f16a879dcd1fa5156f31e010351db8b022eca522c6c21557f3e467e4fc34178d6708638481688f3e6348e75b790b7ca0aa2f71d9e9bfb9d8ef754123a720848bd5d1d0f973b43476b9ff8557804b89d45987137be0328d1e8c9743d6164acf8879258ef760657158caba86fcf1df2590228dd9e12d3a97faa8df9174783819daed1cf13a53262d9c9974777e09847c7b3572263d06225454d3186e9cc1de5ffaed0e8025fe74b2facf223d1e4063589a7a91f2933864a4864f0077d1f00b474266411ac53f41889fae0033cc7436154e2628b446ed631627316270b6b41394049ea22b369f5955b49ba4c3e48e9eb95365cce7d52dc5284086c3981f1e0737be211f764c2e7b39f548d1aa8d3783e0d0b3c3b130b21d5a198fdaf9d567c1e6f4797851d11dd6499d38d0a43e2fd24b893a3b9b597f1f28a466212ba93ed5e4f25914b9098e6d0b847f65bfe2e14baed2f458223257d435e1769df5153eeda5e5a996cd210d448f84c02e3d7b14ff1ada57ecf1d73362a9ac915ffb2e2b4c7cf20dc09ffb9a1e009211095c370366f76b86e607c105f73081a4289fe84c6d21c0d80cf95e5d074edd252d98de86e4da82bc5ed531aa9bbf4785bf335d3669d34e6d969ee77a74fdcc2a4cb645de1879e6f2815ef094ce2ea6997f54da3d4ec5e87fdcdb55e2cdaf2a421681288817c7b42baef19c69c478d0197cd274932c204f631ea6e330ec4921d6986ad55823eefd5175c94f2cd1ae3a60883d23bd41da227a19f25f5836376243b736d73cb28893da293abad5b36325f8fd823a042aeeab35016fee644e48df9f1484660c77b85a591469da2345ec7043c694b46d61d4a03d7bf6f051fde9a41356ae2a33f69dc8d24fb994e3239b836927123aaf2c8d81e2bb70733fc2a00cf478ba753aa7ed27217e9a89ba53f7f008522c045888f1cc3c57df7b753a6de9812a801f34d6417b48ec87da91eb26da746903af28566d53a74b5536971bf48a020cbb243d5cfaf5db4777cc22126ea5abbbc12e7df7f36702e3bbb216c26bc81a10fe5d5fbac9fa5ba51ae17736218342b0b34306e711b4c3acd3ef101bbe48f2569a13d7ebc69be156b2df48d47299224d695ae0a066543f6b3b0890b4705c3a9354b15ad28f014b2e5fe0c26f5d69c5b46deaebd1b62735055fda132b68ffcabce210d8be7e54771dd79db38d8fcfa23733a26d4336d979cf6097555c3a3542ee54cb374e318764eeaca80eac16797e0d2c15ec19ea17412420d76a2dc0d4540d66420dfbb5c8bd7e15ef926767062e2022f94a1f9a473bdb8828f6c6d87755c8340d4f075ae6255f89374fab1ce486763fbe0cd9bbeb12150d951e216fe608b2e418ae4330c53f9922889840c885e9fe3ae771b94e08b57a4211eb22a57fae08f3c4947462794d0aa5c0a947440ff0baf84bca817aa207540477e9c51447b0db8f3a27e06ace1299dd7d8bd063440825b4d17daa393431803d2c5345a09de5d89348735a8658d69d5ccfd7be5b0adc8f6e92ff20bb0fdd268342ad72999f8046dcf502b385e2d527a2c89e8cfb817b9d30753df90ee2721d000789fdae65670d0d8cc65c41884f431e8d6804969abd8011120c1170aca1564e04de460e5a30b5e568c874adc5417bdef68ace52b9d1d6476a6dfba6ebc92d6c793ddb46061bb2862e71027af35ba4b5ab6de2371b3ee97ca16e24a797611b50db34394f2f3b35a073b4aaa28d3acbaaf1b8baa5d80e1bec94443cc41380af0c624b384dbdfea473758f5ee070875003fd65e312aed2db0c4b4c86419fd12c861bfb1730c53a71d92c210cfdc28e8f2f96630f9f89b1b48ab8909434121968cf75997f5a6650c44af12d77a0157ba94c603fc1eb4c59a606103f66c1893c914f73924287761adbedce4cc91a16b5f708fb79cff5db503389e3dd1467488ea916b3e45dd5eed816b007610494ef3825fc48dbfc96d1b3d168ed2c2cb180f48a4cae42d961d12e12316ce59c12bcdb013610743cafd30e9d9fd13a7e9be2cba155f222f3cd1d75b3e71f28eb4f1d08a1ca2006ccaae93d4f55f472a7dcf4c3bc3b0b08a8187a0993b5b3efa0ab0b860ec35e874ab2ce3c684a8c8c9fc1e3b15ba2151e788ff9e6745df98ffa048291969f9fcab23f7bdd209dbd9429a61c4b0f78f9c33d5a687606e85c52a76c66ff5a64d5c617fbb73b7a2fe606dcf80fd89b244eb8d2f6a83b95cd39fbc15973ab3cf168b5620543648babbbaa7c80568fbebb3782e4419a544c6b9b85a2e00e94e152f9bad65277301326b850c76b226bb96ff2c08d17a6b6df6db1c347e27ae16c27a18347a1dd138ce72eb29b38c66f75514f8e7c997baa4619db48b385871e5059236d9de33d619da4308ca0abefe25f43e4820ddb2f1aea93a284bf6171096d69f47e1e7549baa529251836cdc23b08a8541db53212f64adb1c51b3302b37e149a4109f43d6fa1ba5c1c5604c4c62d413a2a496a4e28322d012013a64035e90512de3713161d02ddfcaf536e5ceb0fd0fdd7a10b85a2e644e0ec00e1d01c001bae6dcfb599951f3a85780f93ece814f36980e154637ecdcede490a96a32db828ddd095dab04c328291275c0d4da23b79e3ca0021f03e7d8013b1a8bec07a693bb201a959213756197b721c641b13b1afc4d10ea9b8de90a3f47c54d89fab29a50d2025f16c85a4197fe45f85afce3b1e1c021deaef1a25e7d15a552b0b36fbcd6911179c8f222b0565941093dc1186dc3ec66f414fe184e6bf1faa7b660e7eb5abcb477e92b63a4ce70b6ec08f01a20204e51530c4d606aad8a29ad2605e738518450b386e5e35e380849033424b583908b7d717071e82b888a5dd71c274d98e487de546ab38023f30b919d1d2fa4b4827420b18ea715b74d08b64453ee6f7a1d16aa25faf6aa8459c0b69d02e0bdfc0dc28ef475632c06a797f72c05c5dc44adbee3c1e3839f36687a84528c1b8d7e98ab55985691792021b90c79436570c35768efe07efd2485969564c0a838161e8c7f5e75fd091a5ebdea5e8e2c400c9ff0c3640ca1d60818f04624bd5d6295d6e808a4f807525e287a93bf9f6b0538d41997232621137d4d1a289225a83f712af3597553141d3e8d4cdcfb2217d1a36b677dc2b96c44113f07bbb865ca211a56dd1a4acb1ea00bd15592b89966ea5d41c2a496f23120da47995f256174967b3988df00e92f312bfc3a81bcce8a52740fa7fd2961aed20e8d5c152b09c7ff86917d6795ba84849e13c577caf20e269d0da8019296fb484d3edc663e83068ff717cf3acbdc37f14185a0ab74e6c83ac207a01d62d2cb6f7fd1c86cf843786799f0e7525488a366a570496ab4e855ebacdfac7c1d87fa26bf58eb17eff247f3627fa0d279a83bac61739457a482c26839d005697ab70e4ffdc2b63ee49d5cad904238ffd8ab438db2f5fd81ef8eef38e523b4f16550fccb7a873af05394798fbdd711ba9a422909eb7e8934b47e2d4ed22d4b0eee08678a7ed6456da23dd452eca0b877685e46554e5086cc09415f7cbc6a28df7a619478e2a3cf9b8a1295499b3e02e38244e4d37e585d3eb2d615e35251ca9959c9dc52e182567c8af98fa3c038fb0ef13d5fc7217a7e56bde269aeebe04e31df7ee6e7296c847c63d3e32947be5cf9549ee45bb3fac905146589eec7489b1fee52c21b507a8ee9aea90a7ebe53931e8ed343b49b085c2643146bc6007e77c5a7be3b238a997bda07d118f99f2e53cc2dab2e0fde0d60a25b43e1b66e80964af7749fe531bb334af4a76380644793945ef01b3a56a459ad6ae96239f23d001bc0bc2fe2c41b7081d47baa7cb77dce098abce275ec9c41476996f9e952143f009b183f4e8f8114edf55db7436d5faca984ec1281e93cc1a3fbce7ee0f2dc631d830a354e6e3f97ab8a66a3f553a573cdd882b3f2a15c368f3af518cd1eb5d62509a45762219881ef645b16870e46ab3fed6de61bdf2d5e519ea2cb320e27b6bec75e827006283637bc87048404c8fb98fdfd1ff1b87efe3d15cabd406a0962f2ec85bebea34c5aef6788fb05274f289c091e83ed188afb4ab738fb7f8d6550bd7f3da55242f81d872f0a14f1577de60c7f2b43d9374f1145cd15f8b6074730e56329f47b4eba739f2562d2d8ce3dbb62272f65e06bd166a831bde126870564f56629609b0b1e1152f1e351fc29d99055a36323d4520d85256a2a66565c63f9ec9184e3a1ced7b3303ab18a5c69f2e6b9a9d6c5a1c123d8b870b7c5f11373c82761923b0f439f7aa541587c0e232adb3bc8c698e8446bc18639799f88180797d91dd44d2d7adb4c8a23b385d6a52f70706833ad43e0aacd366e91aae8b55a54994854f864f1259b008e72f5b7d3c79f1e1c0eb3d0c18df53f781c03c0ee2ca875fa917601958719884faa14597f6cede536d1593c17008b0dc57d6c4d57f1e98165e57065706e07854447dcbcb7897442fadf05c6ccc04fdb6999b9ffd2a6afc58b65126c45bbcb7519b03e4074634184844784a87618c08704af509920695caab4e94ab65bf9bb14513c3ba0791b23f3c9aaddfca3684554665caa527ba19f3814de87ad6ecee88df783240685af302797c094c1ae2e790f731b68f8dcff3dde2d48bcf65df56ecd60d3382a38a70726187dcc91b39d4de58fa3926f4b23469bf8f7a95c03b5ed9602e3f65606e7112195004a39cabb23b6211d9dd7eae5300b88a8813cc4f598c39326d417486204d8865ad5e1a0b3c997cf0c53e79436e42228515d211058397fa61c12576562fa80f8ad84175ecc17547e6878320f5592f7898e337a", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

[ 1612.148021][    T5] binder: release 24974:24975 transaction 238 out, still active
[ 1612.155760][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1612.171330][    T5] binder: send failed reply for transaction 238, target dead
03:56:32 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})

03:56:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

03:56:32 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r0, 0x0, 0x1)

03:56:32 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r5, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000040)={0x1, "4e7dff00baa28280f27685be910a7a2eeb8b423d7f62900fd3b4a73f57559cb9", 0x1, 0x1})
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
fallocate(r1, 0x28, 0x2, 0x6)

03:56:32 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000700)})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1612.193891][    T5] binder: send failed reply for transaction 241 to 24976:24979
[ 1612.207814][    T5] binder: undelivered TRANSACTION_ERROR: 29189
03:56:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

[ 1612.280763][    T5] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1612.302571][T25023] binder: 25018:25023 ioctl c018620b 0 returned -14
[ 1612.316203][    T5] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
03:56:32 executing program 3:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x1)

[ 1612.349533][    T5] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1612.385301][T25032] binder: 25018:25032 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:32 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00'})
r2 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x81010, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={<r3=>0x0})
write$P9_RCREATE(r1, &(0x7f0000000380)={0x18, 0x73, 0x2, {{0x0, 0x3}, 0x5}}, 0x18)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x6b728e403229df1a, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x30, 0x50, &(0x7f0000000080)=[@flat={0x0, 0xa, r2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f0000000140)=[0x0, 0x40, 0x30, 0x20, 0x38, 0x20, 0x30, 0x0, 0x28, 0x78]}, 0x400}}, @increfs_done={0x40106308, r3, 0x3}], 0xdb, 0x0, &(0x7f0000000240)="c88209aa84e81c77f0ae6e316f4632d4f6df234f055e3d48b4bba1ec21352bf82fa8ce5a2adc0b9d3e19bd4d46ccad2b5fb1edac2609f25b6cee0c3d13763069beb81da3ef61698a11e349c4e002de27263c5b0644ac8e4e7c9ee609936f4a905d434cb590525ebb839f8a3dce4d971ccb057334b1f0c7845bd96562c101c93672adfccfce7521ba1c56237d6ed911c225a3c532490d04f8c2ed8a7a4080cf20f80b4d97c1d526896ebe6f2dbab932b2ae0c4446ebe88036a64fd0b9fcf33ec1926af3412dc9ba872016efcf0a46e2653141571e317d3c8d01f52a"})

[ 1612.393399][    T5] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1612.403923][T25034] binder: BINDER_SET_CONTEXT_MGR already set
[ 1612.410026][T25034] binder: 25022:25034 ioctl 40046207 0 returned -16
[ 1612.412015][    T5] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
03:56:32 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

[ 1612.442369][T25034] binder: 25022:25034 Release 1 refcount change on invalid ref 1 ret -22
[ 1612.473811][    T5] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
03:56:32 executing program 3:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x1)

[ 1612.496188][    T5] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1612.508774][    T5] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
03:56:32 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={<r2=>0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r4 = getegid()
sendmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x6}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="f068db057a930231d6ef4b005093cfc0a5280f7aebe46e473ca07c4f0cef03f70b626e1dbdc8cd3facc2ab57caeb43f8e03fd7f1a94ad7562e0a420527f5d107280f00b477e8490665c838d763415644734d4dbcc805c9d8a2316efc1ff4c1ef755f7b4e01d061ae1f6358b8befd7f14b5a2f03a2b4eb59593508c3be27c22cd9f7145f336369861650d932927c8c39d9f8a41f9bf2f9d9d6d507818d8b0c4ef3ec9e1a0bc49dc79e9ff1bccfc6a89da58c0693a53b9ffd3a2a679a218117deb5d67ab7906cad19ed9e14e4943609dad087b5917e88b1189666bc16919801b580af04c1a76127072ade9c139a28dd1df", 0xf0}, {&(0x7f0000000180)="a52a5efc3b185545dbfef3ab563b07033e1d627fc6fa2a37d11424a3cf5f8212c4bad5e89c792be7b0f2752ecf4e181dc74db2838c634a544d119ae4437028662e0cea714339", 0x46}, {&(0x7f0000000240)="ed5205cc488b5330711637bc8c00647f1d2881decda67b4d0b69d2cb6b4b389e47d148dc88bb290973527a0cd3813635c9e0439c590e187a20a87f27398575c5fd7ac8f42d66e130ae8f903a19dad435b2fa3ca9d24ec2df14a09342164e5849842084d7efdcc5e172db539166172e74bc40f619569b73331b5ee8148dc887c93aca5316d2dce46fc002e9266b623a3a50478b8d5f78cfa4560608afcc229d45a738ce6a0edcb38450909237", 0xac}], 0x4, &(0x7f0000001580)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x90}, 0x4000000)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r5, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

[ 1612.540607][    T5] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1612.660051][    T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1612.687700][    T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1612.702254][    T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1612.718696][    T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1612.726574][    T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1612.734122][    T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1612.741544][    T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1612.749026][    T5] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1612.758845][    T5] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1613.068974][    T5] binder: release 25018:25023 transaction 245 out, still active
[ 1613.076849][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1613.090334][    T5] binder: send failed reply for transaction 245, target dead
[ 1613.098601][    T5] binder: send failed reply for transaction 248 to 25022:25034
03:56:33 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

03:56:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x8}, 0x20)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:33 executing program 3:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x1)

03:56:33 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
getegid()
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:33 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x24, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

[ 1613.133594][T20266] binder: undelivered TRANSACTION_ERROR: 29189
[ 1613.210876][T25065] binder: 25060:25065 ioctl c018620b 0 returned -14
[ 1613.234330][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 1613.249371][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
03:56:33 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

[ 1613.285089][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 1613.293104][T20266] binder: release 25060:25073 transaction 252 out, still active
[ 1613.316532][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
03:56:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

03:56:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
fcntl$getown(r1, 0x9)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1613.332090][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 1613.339697][T25076] binder: BINDER_SET_CONTEXT_MGR already set
[ 1613.363346][T25076] binder: 25069:25076 ioctl 40046207 0 returned -16
03:56:33 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x24, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1613.378960][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 1613.384502][T20266] binder: send failed reply for transaction 252, target dead
[ 1613.413797][T20266] binder: send failed reply for transaction 255 to 25069:25079
[ 1613.421070][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
03:56:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

[ 1613.450742][T20266] binder: undelivered TRANSACTION_ERROR: 29189
[ 1613.464410][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
03:56:33 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:33 executing program 3:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1613.509511][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 1613.518676][T25089] binder: 25084:25089 ioctl c018620b 0 returned -14
[ 1613.543782][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
03:56:33 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

[ 1613.577767][    T5] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 1613.614404][    T5] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
03:56:33 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
connect$packet(r1, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0xe9, 0x6, @dev={[], 0x1b}}, 0x14)
write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x6}}, 0x18)

03:56:33 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x3, 0x2)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

[ 1613.625569][T25095] binder: 25084:25095 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1613.647522][T25098] binder: 25097:25098 ioctl c018620b 0 returned -14
[ 1613.680536][T25098] binder: BINDER_SET_CONTEXT_MGR already set
[ 1613.697675][T25098] binder: 25097:25098 ioctl 40046207 0 returned -16
03:56:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

[ 1613.760686][T25110] binder: BINDER_SET_CONTEXT_MGR already set
[ 1613.782248][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1613.793498][T25110] binder: 25096:25110 ioctl 40046207 0 returned -16
[ 1613.800403][T25098] binder: 25097:25098 Release 1 refcount change on invalid ref 1 ret -22
03:56:34 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/d%v/nbd0\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ncpfs\x00', 0x1, &(0x7f0000000140)='./cgroup\x00')
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

[ 1613.809288][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1613.814822][T25110] binder: 25096:25110 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1613.823547][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1613.847524][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1613.856923][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1613.859473][T20266] binder: release 25097:25107 transaction 262 out, still active
[ 1613.866296][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:56:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 1613.921390][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1613.958104][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:56:34 executing program 3:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1613.974400][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1613.982315][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1614.000399][    T5] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1614.013237][    T5] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1614.066489][T25127] binder: 25126:25127 ioctl c018620b 0 returned -14
[ 1614.085344][T25127] binder: BINDER_SET_CONTEXT_MGR already set
[ 1614.091489][T25127] binder: 25126:25127 ioctl 40046207 0 returned -16
[ 1614.151685][T25131] binder: 25126:25131 Release 1 refcount change on invalid ref 1 ret -22
[ 1614.164365][T25131] binder: 25126:25131 BC_ACQUIRE_DONE node 266 has no pending acquire request
[ 1614.301161][    T5] binder: release 25084:25089 transaction 259 out, still active
[ 1614.309097][    T5] binder: undelivered TRANSACTION_COMPLETE
[ 1614.323913][T20266] binder: send failed reply for transaction 259, target dead
[ 1614.331315][T20266] binder: send failed reply for transaction 262, target dead
03:56:34 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x24, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:34 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x9})
openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0)

[ 1614.346342][T20266] binder: send failed reply for transaction 265 to 25126:25127
03:56:34 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:34 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

03:56:34 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1614.422143][T25138] binder: 25135:25138 ioctl c018620b 0 returned -14
03:56:34 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
ioctl(r0, 0x46, &(0x7f0000000140)="a64dade19118a79e054ebb28a7b1054b3265b332f9b076acf19c486c51203cd68f24c051fafbb13f216ee880897528515f3a60d4b6df531a4d23a53a40dcf9c18d83311d26dc53240a8af00068b57911b180f3ec59fa6216fbc8a6d733b0b3a095f7430c327935eb33d034d3c3bdba4cd532a63f7ec69b72a706f8c57e5ce732bd0dba038ae05769d09a156da16b5b99428a3332d390a204f3712a805c9c9addcaf37cc81f097782a81479d5bbccb0ee1366ce04cdb8df5f023d570a9cd37c001943b8d63e009bae62c871019b33cc9139afb1007249bc73137edb6bb7df1f")
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)

03:56:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

[ 1614.513693][    T5] binder: release 25135:25144 transaction 269 out, still active
[ 1614.552264][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.603152][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.635793][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.636770][    T5] binder: send failed reply for transaction 269, target dead
03:56:34 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x36, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:35 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgr\xd9[\xed\x8d\b\x00\x00\x00\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1614.643995][T25156] binder: 25146:25156 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1614.659450][T25157] binder: BINDER_SET_CONTEXT_MGR already set
[ 1614.679550][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.694170][T25157] binder: 25145:25157 ioctl 40046207 0 returned -16
03:56:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

[ 1614.708210][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.721104][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.751480][T25157] binder: 25145:25157 Release 1 refcount change on invalid ref 1 ret -22
[ 1614.765728][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.776924][T25164] binder: 25161:25164 ioctl c018620b 0 returned -14
[ 1614.789412][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
03:56:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

[ 1614.801768][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.816455][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1614.832944][T20266] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
03:56:35 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x18000, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cfroup.stat\x00', 0x275a, 0x0)
ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f00000000c0))

[ 1614.847851][T25169] binder: BINDER_SET_CONTEXT_MGR already set
[ 1614.859952][T25169] binder: 25161:25169 ioctl 40046207 0 returned -16
[ 1614.867369][T20266] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
03:56:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

[ 1614.897707][T25169] binder: 25161:25169 Release 1 refcount change on invalid ref 1 ret -22
03:56:35 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:35 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r1, 0x0, 0x6, &(0x7f0000000380)='wlan0\x00'}, 0x30)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

03:56:35 executing program 0:
syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:35 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1615.356538][    T5] binder: release 25145:25157 transaction 273 out, still active
[ 1615.392172][T20266] binder: send failed reply for transaction 273, target dead
03:56:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

03:56:35 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x36, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1615.428177][T20266] binder: send failed reply for transaction 276 to 25161:25174
[ 1615.461272][T20266] binder: undelivered TRANSACTION_ERROR: 29189
[ 1615.506562][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
03:56:35 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x2)

[ 1615.555035][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
03:56:35 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

[ 1615.596316][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1615.610845][T25203] binder: 25189:25203 transaction failed 29189/-22, size 24-8 line 2896
[ 1615.613404][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1615.633380][T25206] binder: 25192:25206 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1615.647076][T25204] binder: 25201:25204 ioctl c018620b 0 returned -14
[ 1615.663387][T25203] binder: 25189:25203 Release 1 refcount change on invalid ref 1 ret -22
[ 1615.678183][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
03:56:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

03:56:36 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x9, 0x0, 0x47, 0x3, 0x6, 0x6, 0x197, 0x40, 0x2ec, 0x10000000003ff, 0x9, 0x38, 0x1, 0x2, 0x30000, 0x1}, [{0x5, 0xa510, 0xffff, 0x2, 0x2, 0x10001, 0x6, 0x6461}, {0x6474e557, 0x1, 0x4, 0x8001, 0x4f70, 0x8000000000, 0x1, 0x100}], "dc47f28b098f8c087cb8639bcb1e9a4150da2ee5b6ab89a627be1ea006cbf8a9894e268aa46ab605936d68643ae0927e4830c8e4bf9d83a201", [[], [], [], [], [], [], []]}, 0x7e9)
openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000140)=""/177)
r2 = gettid()
syz_open_procfs(r2, &(0x7f00000000c0)='net/rt_cache\x00')

[ 1615.699365][T25203] binder: 25189:25203 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1615.705011][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1615.727853][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1615.739650][T25214] binder: BINDER_SET_CONTEXT_MGR already set
03:56:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

[ 1615.767286][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1615.769728][T25214] binder: 25201:25214 ioctl 40046207 0 returned -16
[ 1615.793805][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1615.806243][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1615.810515][T25214] binder: 25201:25214 Release 1 refcount change on invalid ref 1 ret -22
[ 1615.814314][T20266] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1615.834779][T20266] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
03:56:36 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:36 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:36 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={<r2=>0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r2, 0x4)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x1}, 0xe)

03:56:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

03:56:36 executing program 3:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x36, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1616.359883][T20266] binder: send failed reply for transaction 281 to 25201:25219
[ 1616.368265][T20266] binder: undelivered TRANSACTION_ERROR: 29189
03:56:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

03:56:36 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x36, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1616.432912][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.440565][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.444784][T25237] binder: 25233:25237 ioctl c018620b 0 returned -14
03:56:36 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='c\x16group.stat\x00*\xfa\xfe\x03\xaf\x1cS\x9fH\x10\x19W@\x82\x1c_\'7\xf4\xb8\xbd\"\x8f,\xbf)\n\x92', 0x275a, 0x0)

03:56:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

[ 1616.510312][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.541999][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.555095][T25237] binder: 25233:25237 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1616.584285][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.591735][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.615152][T25247] binder: 25246:25247 ioctl c018620b 0 returned -14
03:56:36 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1616.629875][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.646807][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.657810][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
03:56:37 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x93, 0x4)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=<r2=>0x0, &(0x7f00000002c0)=0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000003c0)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={<r3=>0x0, 0xbc, "dbc286ed55afef36a6c89e02f9e05a4b5d21632a0b47cd0f33c629efe8e0321edd0bb479a5cf00d84a177815b551cff1730992784f581c16667d14102d3de89501be062f287362d9cd3b85c8c986acb3eaafaf97602a5c2d098b182c745a17d0862fafcb87c0965e2220a2e8c8eacc6b7ebffe8dbc3505c39be288c12519f89711fd49231c6bcde20c55a2dc3d1fd748c37cb6e96c4cae4b3e4be43cf806ee9efcb778b5ce0e1bb8bfbfb3518d45dff8ae3e87aa6a8e5fe37a3719e9"}, &(0x7f0000000000)=0xc4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x4838c994, 0x8008, 0x9, 0x20, r3}, &(0x7f0000000240)=0x10)

[ 1616.680030][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.688210][T25256] binder: BINDER_SET_CONTEXT_MGR already set
[ 1616.708393][    T5] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1616.714999][T25256] binder: 25246:25256 ioctl 40046207 0 returned -16
03:56:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

[ 1616.731784][    T5] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1616.742366][T25259] binder: 25246:25259 Release 1 refcount change on invalid ref 1 ret -22
[ 1617.228152][T20266] binder: release 25233:25243 transaction 285 out, still active
[ 1617.253139][T20266] binder: send failed reply for transaction 285, target dead
[ 1617.260561][T20266] binder: send failed reply for transaction 288 to 25240:25249
[ 1617.268539][T20266] binder: send failed reply for transaction 291 to 25246:25259
[ 1617.276427][T20266] binder: undelivered TRANSACTION_ERROR: 29189
03:56:37 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:37 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:37 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x8002)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x19)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

03:56:37 executing program 3:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x36, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:37 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1617.298702][T20266] binder: undelivered TRANSACTION_ERROR: 29189
03:56:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

[ 1617.414175][T25278] binder: 25273:25278 ioctl c018620b 0 returned -14
[ 1617.437154][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.455778][T25284] binder: 25275:25284 ioctl c018620b 0 returned -14
03:56:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

[ 1617.468686][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.483257][T25288] binder: 25285:25288 transaction failed 29189/-22, size 24-8 line 2896
[ 1617.494849][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.508480][T20266] binder: release 25273:25289 transaction 296 out, still active
03:56:37 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1617.518797][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.526909][T25290] binder: BINDER_SET_CONTEXT_MGR already set
[ 1617.544450][T25290] binder: 25275:25290 ioctl 40046207 0 returned -16
[ 1617.545464][T25292] binder: 25285:25292 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1617.563285][T25292] binder: 25285:25292 unknown command 0
[ 1617.568076][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.572461][T25292] binder: 25285:25292 ioctl c0306201 200003c0 returned -22
[ 1617.596384][T25290] binder: 25275:25290 Release 1 refcount change on invalid ref 1 ret -22
[ 1617.606244][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
03:56:37 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:37 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

[ 1617.609454][T20266] binder: send failed reply for transaction 296, target dead
[ 1617.620910][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.621473][T20266] binder: send failed reply for transaction 299 to 25275:25295
[ 1617.628610][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.683861][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.691335][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.700774][T20266] binder: undelivered TRANSACTION_ERROR: 29189
03:56:38 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:38 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1617.741503][    T5] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1617.764223][    T5] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1617.784805][T25303] binder: 25301:25303 ioctl c018620b 0 returned -14
03:56:38 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

03:56:38 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = socket$inet(0x10, 0x3, 0xf)
sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000180a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r2)
openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0)

03:56:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

[ 1617.876327][T20266] binder: release 25301:25314 transaction 303 out, still active
[ 1617.940107][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1617.962744][T25325] binder: 25308:25325 BC_ACQUIRE_DONE node 307 has no pending acquire request
[ 1617.972317][T20266] binder: send failed reply for transaction 303, target dead
[ 1617.981870][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
03:56:38 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

[ 1617.987142][T20266] binder: send failed reply for transaction 306 to 25308:25315
[ 1618.010792][T25328] binder: 25306:25328 transaction failed 29189/-22, size 24-8 line 2896
[ 1618.028960][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
03:56:38 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x20000)
setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000100)="e03b64bb20ad0738ab7de5bc0fa9551be67b879d2ec4539e40aa9db33e456f9a2e4c5a48f9406f51a39b67f4ee9e4e16439b2f09f716b4bd56c765e0b4e7724b00bc2eb90f", 0x45)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgrou\"\xdcYM,I\xb9\xb5\xc3\x12\x81p.stat\x00', 0x275a, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000040)=0x80)

[ 1618.057492][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1618.080274][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1618.105719][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1618.114328][T25332] binder: 25331:25332 ioctl c018620b 0 returned -14
[ 1618.142320][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1618.149954][T25326] binder: 25306:25326 BC_INCREFS_DONE u0000000000000000 no match
03:56:38 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

[ 1618.173025][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1618.187888][T25326] binder: 25306:25326 Release 1 refcount change on invalid ref 1 ret -22
[ 1618.197061][T25337] binder: BINDER_SET_CONTEXT_MGR already set
[ 1618.204748][T25337] binder: 25331:25337 ioctl 40046207 0 returned -16
[ 1618.213687][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1618.227770][T25337] binder: 25331:25337 Release 1 refcount change on invalid ref 1 ret -22
[ 1618.233451][T25328] binder: 25306:25328 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1618.239673][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
03:56:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

03:56:38 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

[ 1618.271424][    T5] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1618.290494][    T5] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1618.345410][T25349] binder: 25339:25349 BC_ACQUIRE_DONE node 315 has no pending acquire request
[ 1618.398574][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.419761][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.435479][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.444552][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.452586][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.461765][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.474311][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.482458][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.490120][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.497681][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.505535][T20266] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1618.515619][T20266] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
03:56:38 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:38 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000140)="df43b564ec943b8f5f80dd8844132c73dbb8b9420e5f3deda90fb43c9ff044399e8d371137061d3db425de5d2fde7c8d3c4e0a40230443e43299777d47eeadca8d4400f3234f720b784b206fe17d6b1273e9384f90ea5b4afec18d5e7b5967963fe570533cc99b331fa84d6cab10937dbe88aa8ba92abff50dafb554a8a548601f33d822af43b1bb82e792884f1af7d6bd1eeda0d4031793cdefb7e07fb1b783b80d23e29a402f1f6fa646b0cb65c76b8fcbe8cdcb17dc3db6e400d29c71697fbc8f90fad097dd5420a79f3e03e7547f3b19f67a7ec975fc01c126839a980994", 0xe0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x0, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}}, {{0x2, 0x4e24, @multicast2}}}, 0x108)

03:56:38 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]})

03:56:38 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

[ 1618.672261][    T5] binder: send failed reply for transaction 311 to 25331:25337
[ 1618.679917][    T5] binder: send failed reply for transaction 314 to 25339:25344
03:56:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]})

[ 1618.737185][    T5] binder: undelivered TRANSACTION_ERROR: 29189
03:56:39 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:39 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:39 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000001600)={@remote, <r2=>0x0}, &(0x7f0000001640)=0x14)
r3 = geteuid()
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8)
r5 = geteuid()
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0))
getpeername$packet(r1, &(0x7f00000017c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001800)=0x14)
sendmsg$nl_xfrm(r1, &(0x7f0000001b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001840)=@acquire={0x274, 0x17, 0x301, 0x70bd2a, 0x25dfdbfd, {{@in=@multicast2, 0x4d3, 0x3c}, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, {@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@local, 0x4e24, 0x10000, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x7f, r2, r3}, {{@in=@rand_addr=0x1, @in6=@mcast2, 0x4e23, 0x6, 0x4e23, 0x5f5, 0x0, 0x20, 0x0, 0x32, r4, r5}, {0x7, 0x3, 0x785, 0x4, 0x1, 0x2f41, 0x7, 0x3}, {0x1, 0x80000001, 0x7, 0x3}, 0xb96, 0x6e6bb0, 0x2, 0x1, 0x3, 0x1}, 0x8, 0x80, 0x676c6672, 0x70bd28}, [@etimer_thresh={0x8, 0xc, 0xe4c8}, @offload={0xc, 0x1c, {r6, 0x3}}, @algo_auth_trunc={0x130, 0x14, {{'wp384\x00'}, 0x710, 0xe0, "9dfdbc3a6f9dd6e7e3a17405cf5797d6ed97c1489068eb7dc5bf3115e7e6f3484649521bf1c0d975b29bef73021d60cbd79354d5b4f877fcf27aa4ba2c605f94720097c3d04d7ad509fc73707f65d1c48aa5c0f069a3adfcf2fc4edb7ba4a7c4a628ca35bc4df5a9f4cc592140134c4a8bc914de70a3645b5a01d16207a28ed2900238489c2349a981ececc9d971a1da5bcbe25e52a70901697e63d3e309e8ca1b571ed24c0259becd8787ff6e9d1b4e4b4e78cd3e7fc2930ff4f364771916888e5b0c540f0d3d51de4d80c955c12a5a412cb3775300bd0badfc547a1008e9778ea8"}}, @etimer_thresh={0x8, 0xc, 0x5}]}, 0x274}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

03:56:39 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:39 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

[ 1618.888838][    T5] binder: release 25368:25379 transaction 318 out, still active
03:56:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]})

[ 1618.953185][T25386] binder: 25381:25386 ioctl c018620b 0 returned -14
03:56:39 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:39 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:39 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)

[ 1618.995818][    T5] binder: send failed reply for transaction 318, target dead
[ 1619.004011][T25393] binder: 25376:25393 transaction failed 29189/-22, size 24-8 line 2896
[ 1619.035321][T25393] binder: 25376:25393 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]})

[ 1619.046079][T20266] binder: release 25381:25395 transaction 323 out, still active
03:56:39 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]})

[ 1619.157364][T20266] binder: send failed reply for transaction 323, target dead
03:56:39 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)="305406bf1a9b3117a204704f89976464a8a84933459d6825ddc2a34c77fa5a4114e134846a93fb63fb3ee7e05bdfc0e45a3e67376f78731092d84887e9f1", 0x3e}, {&(0x7f0000000340)="b6c4810efea0d53bec1a573cbc68b27b4fc4985630242ee10c30283d9eca9b581e534ac84048fc7304ffc956caf5221aef0fda5f8b30a0df1490f508c99cb118483830f4d66b5b7cc78d3994df6e227d5f411fa7843b82e2c813357f13b7b17786a1e4f0f94faf55e9c02bfbdddea689051b27778c96a704e09d17c72f768e98c341be713be89da4391eb06877721cc2d11b3506e89da5f5f7a99f484845c8dfebb7d5489132c952f48ab51879126f7a04d7f4f3c138fc1817d2ea1b3bec079a1b5e9054d15ea26e4f4bba1fa20eb002d77cd0f4d7e826c196d0ca71caabb1ae33725e11b640cc8138c374ae7f9ce914a4e46dcd07b6440d7c2ad3a9345162beb60a4996c21f7d12fb57ab5bcdfb0018a20ee3545a00fa940874a156aa598400c69e3d6595afe6c2f000238cb4b7e023e77a5f9fd74d854e51527f92ac8b207d5b1cc351b38bedab8d10e47019d18528a7f017131470b718be0319e52ea3c75438c19e420c233c984efc4abbff6336db782dcd029341fd4bb0495912baf92770216856016125508060e62488b4e47f58f42e58c3c1a00e41332baedc0dd3b070d44809ea2d985b5fa50049021b4f8e0fc23355de15e8fee606a406b99b20798de541f3edc3de35f8bbd8320a13fec2b19744090f06f8d201eda2da47481c9982e6c173adc0572c34716b16f2d8dfbfd42ea64f98640c42dc92961026be642fc071d5d4594f4ac41a8427e65adf0ae21b8d1a71048b347ccc7e407e16650c2b541e61287e8572a3fe0558fe39bb0e022d4af9e3dacdba8da8653d781ee7f6ccc2586be4f29a3b49c33632ad5f5390e65ee4938c3bc5c41dc6f314fad68767583ced28fe16b4eaaca433153fd54de11e1618d018cf663b0449c9763ae8859abc552fc3f60d4a90b4024a79a02408dc131680fbc7e1320104651056efed2465fdc79125222e2e1d1cd5ce6cbf8d4b305010b1f4ef8d25b07a2373da805db9ccc714b1a7244e2ec53de7a7319fe49742a97ea80cb87f836ae21596d2a06181a29785f356b644f7a49d0c209d0b51b964de6a9d1bc85c4a654d24dd11b35f37a1beab8c03efe0cb2e5e366747ae8a382ede339765c895914b63dced6f432146e6a5fe791d6f42632da3cc1739602025150f03d1ef55ff67ac3339cfd0c9c9e46dbc369fa90b991b9a3cc56cdaebf7bbd00a71a6c639eca9df48c5ed09dce1b0b54e9d682e294e5b42d6191d9f6fc8d18880fa4ad07d5816ae7eb518d46cea2fd1e1e4b55536ad7e4dfdf549ec03ef9f66bea3cf8e62ce5bd0df0654c90c4caf28596f33444d7b6d20ac9175f5c609bea98da4b8a939369fe635dad9e751ee31128488d14f36fcb16249c920bd957fc1f0a83f427eaab88f2c10ee3101445addbeb3cae6ff0e1aa4d4eb42fcba5a544601fa8cb34c1977e506e5d038ce7a18256ad5b3b2a606f5f4a6c5f2242714cfafc5b181dee1e205c8c91464db6e0049aab2bcc3758b538c73c7441eb41f79562008983c42832d753b362f906ff180a83cbf98f5c5449c155794e0a5a5e6c2a2a8a442ebddee4270a65d76ce5b7d01aa5bea907b467a1f88366ef9ccedd364bbec93d1dcb7da32b583d80e545a9bb6d4d4fddc9f5b734f03cbb9ad840d170e28f932ff2cde993004680cf66332c10aeae56c28160fb481fc09a493153801285fdc96863e02bf7f123f8be6a0a670cb4e7117e57acdb6bfed214c8a68f019bd9fcf50299d59e91e9d38b5ab12405aa51b197d45d703388cf548442e5b68d1254c36f1d533c6aee0411ba939fc98eca87eb943c98cb1d67b489401dbb33df75cc549757a86a7a2342ca66fca38cda484ce9b76da6229022f11ca06b0bc967b52978c543064d02e0bd6f755dcdbf05580fbf8b78d8c93f8c8251ad8434f2e7a433a0d1b2a36118da0e77ba4b8beb75945f943674fceefcdce0d9e0494de150a0739d9391e28e10e10b1d4994ae73b31f5aba291924bf9271d96e327a4268ebabbdceae301ad8fb173b6b0fff37d54d6e0f295b5689ed6ea334b9ea4d1623d1db8c6baefddcedc48a02bdb526a811f15e2d9152b33ef6c2c0edb5515a5034015389dd6f111304b4a0fd69c9f01a33d5c03ec71b135def38f979dea35aaf5fe44494581d72015666607e7c5284b8225741dd5749060087813294e61c83baff15ff5672847e78135ea0d1a2fcadcb59a8ee68ed8cdfe4bd6dd9fe58fef39eaf6632345be44b61ce1d3bbbf3ddbf4e1bddad530563f1f1764df48afaae298d9954aa9c6fdf34341d8ac70ad2bffa97b1ea89368a4e2cedcdc1783958d4197dce6cb28f4bff4e82eafd2d297d6b369704c1554b2eb95fd93b3349b837819b8ff06b58816b33bcdd4ce279d58cc12b714180e63f89b82d8c6f22cc7ca4a90a4996316788896d7a1468c185ad9a915722de03ec814b04b6a2449fcd1d699d51f575483d0cf6de607ebc99ee292b3636aff9ff6ea0d9ab3916da49a4eda904a240ebb4b85fc1f70de14782394ffaae098dcb6092e2fb1a9ee30c9e862108b593d84844ed3fa6bface63c8f82669d94868e11fbdad677e0ec2b438f4d82e66ba33ccce582eb6de016a5735f57bd79a3a017a459b7e3dc3041cb9556dc804046c365cb3e2260c212b73e5c645206359e3de31c53ec9630ac67ff51853f505ae07b2e6737b6edcde1e69757f11432905577a64806b9ac46b99571131dfe39d9d866f00eb9fade0061cfacdc2be0a92d955f4a85487b180cd41c760cd964cb7300f62e68e5b497013c5b8ea549313436e024f5cf2a910bcf0e6a690135b25f8dd3ef38837e878a24dce744c3359ada670e4bc5b894a2e7360ff310013e635c5b9588af8ba5bd2d4f09c61201f1750feda84c778e49b3e1ab2880eb4feab6f33a37b43d6fa6fd0e91e8f78ca7869133e62f5da5d996727e9259fe93a8fd6d37b7f7e4ca9f7585a8359903f0dff47ca75ce675e7029d2459f6713e05de7cc93650d453000be8fe10014e31a821f5c548d2c4fee5bd0d1b89a9d8234ebf9f093822c9493cf90bba5f2aaf148b4e0256e25cf8bbc4d75590946a9dc6a40531ff6d3193e4270c8a4b1580921b638e5ec9f217892682ddac1cf031f25345fac0a6eb574722f8af3fe4eae741183a00d3e4378b6da8b808f22c4ed53e1a29501d729a08406de36271b9dd0b1d8145662e5f2fcac47ae409d8b9a64374b622880cedd26bf28e3c3101160e2ae2ed40028b03e01d8716ca2071d536e57c962534ce6e19b8f7f1d2a8f5d24d4f253ce9bcc5984184816a92315c384803589b3c2c64a40ad14824d2fe06a3695cf2d8bb2d9716886dfe97eeb9fe165f536eafee3a74e225bbff27619bcafcf6410452758817ccb3d45a522e70aecbe93a90213e36a826de0e66ad473a9a4cb23956be5fce31f596cca9575b28c3d2223006ca680a9b954d5df03588aa6a30fe74814349f36cef7910e1ab8870c46e1745d25da0ca6adf0a48daeef1b1001cdf12f920bfaa4cd6ec79953a4f4c8bd615874f3069bf40343f27f69c0fefbfdfea20cbd5722a645012ef8ff6b5fa1c1e0096a08ea4636468390831b489adf4b6ba180321824e78b60b77bb4d1384ac1922e24768fa29674676f113a57fbfe508e663310b3b7e75f29509ddfdb10d3a01914bb98e3e1f6f25262573c9ee00c8d65d24fa9d5e61c73f0b091d1ddd7790fdd9695012e9e990e3722df69e2384672b65691970a1dfaf84cfcdf866b5ab5fac981ec1ffa2603f0af6fb9887b1c57dad6dc2222cd8c4c7ec1d0d6c1c76ddad18df1c37fa675d3b79bd8eb163e6d0be7c17bb43f79a6c8742e223d3d73825ceb4377fb28721c6bca3304d73e1a7717ed46f55778a7f969fb3b1cf37c0abfedc89c6a73647e04ea374f9a5c2c2235af6daf0b49bda8e7c06328137d3bb736580544a87f76fdaa419d181a6d3a6f3303521ae92a2141d032d567fb23eb49225baf4f8bc7b591c52e5641d529aa3fc5369970063fa7179ce0daed1e499dbbe61dc23ee148d5a6b58f1000ae567c15032c7170caedcfef46c7e9eefeaa067c3c6ca7f19d1db1d256b5fa9ab0d97595ede8daf28cc46a01564ed7100f934b0cea569ae00e20f4eb5703dc93dc7cfcb1fbb8d9cfbcd5babac77f8709f88662ac90dfdb5a0c66d6e594d68d2bd65224f0a8d710675d1e4e3280e73c3d7bc26a02de4e70dcf766b22321f4eacfee15b35730312b5053bc2281f398370779a9f9252564d680f0f86b5b127cd7db2286c7efb464b8ec31d65961612444a41a2fd2dfaf73d291b078f03d52a014380816d5c65dd967ec8cbdb3153379392f263526c27b79e4c6780f042ee87d2279f4aa1207592429a07e1ed2af35929c1eda28cd9f078298f1e4fa46420ca023cc6c880a9bb7e41b654a9e9ff84dfb903ef8adc2dbb6c50c7adad3d816258d4a7a711af2a05c87d84872cf35d6b9e215b11565abade0af7a091602530c98cbb6472249ea470a3ae400131fd4abd2b62d2d31bb570d859bd1ee8a55b99cb1b9d2ea60342443b81e45adaab63bbd0108c73dbca82ffb6ab7b5a7fc5f4dedcb8f1e5e1de5a5a2495005c76d8f70cf1d1a40e7ae75810d0c2afaad3c72b74884e447a6c10125157cff3ab2a313c6f8a8903da7b2e34e35ca85f2aaafb17dcf3418bf1d90316e3fea96344e45eff19606c6cf3775458a5723491cdfe7b42fcf81fead3d0764509dd969c0da1ef0b7fe97e3b93f6d71b5d2f422c09314e39cd69a6de2377a074b024f7532a33ba2a22e036fc9374aa84040f3bc28c4e4c09c4a39eb14abab331df5de09dff6a4fb15a848fbf4469d5d6315fc0cd764102761fb050f23ebdac0a470e4791f8148be1af0ec73b8d591bf05d164cc78c549e9c58a3ae2b7db84add15a39f70b9cdc5a44ff649ba8d19466b161b06010e2ca5b889172fca27717323d1de444aa416c6661a33ca3a02df169f18ff8e33014e7627bc7d3faae1d63ab267cc5e6f9b682f72d7ec80ced3f2c24aeb6f5575a46197af95ace35bb14fad6d4f60ddaec4fc9fee3fdb670563be0fa334c8e5b732cb4f813138af095bd4d289dba884f996f9b0a362368b80526e7008a7501afeab1d3894cc97a6fbfdcc635606936ad0ef26a6e44fefbdf11fc674ce7fa762106e21c2bdff4ce18a7d14d206e9e1a5ba9b48198d6d0c3731b3ae1d2f5996fc3cf5805a929fe266b74e9f1af65bd3925ad5682e2d7978ea12dfe13a85fabf37c6a047b8f0026911040245d9b5bbcb58032c264e8e11285cb21af894689881f4571e670b470698caf151aeb86070ee989a982b10031427388adb7dcc2e01dcc5f4dc044c073f96ef2eac277dcb0fbcadde44433bc0d4d7e0027dfd9bbb8ac1797d4840b3c94de379bf64e74516867d53a0404fc5438fb62967378bc2ad23eadc282e9ae16ecae8cd4cf7420869d7c9c9322e1bc25c7302dcbd84433ce36a9e483fcd6e25353ba07af5fc7280c1606753c628ec59982f45ab81771bf146b2aee2858bea3e73d7817bafda12dd58bd191aa704cd20dc2e5bb9e501d17d77891e7363a9169b06857ce70b0229f316fcf022f9ded49bca7c1e1e0abe25aa6815ae0f9b9c1391fb9710470d9a8055eabaf202520a5a61ebe04965a478acd9ddc4e79dd45168300321bfe9976cde3a63b6891ff3c16e2865db96481f5b3784f9b041ac0edb9aa13fb3651977388788032c496ece0967e5eb15f6d26c77b827cae14c843a22d2ef946473035dcab8daa15f1a32334b1de4f3bf879e06c8ab525b218c7e51dcf6085e6abf7", 0x1000}, {&(0x7f0000001340)="aaf947b7835803ee500fba28522d02c1dd11159660cda70a4337ec9a2bdce83cf0594afc8fde3a7fcd0fd11cc7f4ef8bebd6c30c5ecf827b08bef3512a16cc1148930a7805db7822bd86e4f3e96ef6dd9c6121192d04d72444e5214cd6515b9d45b49200e080a6d69b9fd4d010d39697222aa6717fede1717795862230a1bc7218bb0fb807eeec23307d", 0x8a}, {&(0x7f0000000280)="156d40f4ec5821d127073cd186138c1c3d2c94ab3b3bf6aa2292c6af59d0f68e19d4579fd83faa2b605842c00c848324d96be763dd0dd429c7166f9b81aa89d87f958730d82c254101f15b267f85426fad", 0x51}, {&(0x7f00000000c0)="dd396395fa060716100ccb1251e565f1163235371509a4", 0x17}, {&(0x7f0000001400)="c8a88ffb5710bc349ba17068cfcf92c75a33a4bcea4d8b171416d11847afc309281b3cef7a9e8d0de0734412dbc650846b9b52bbc1f7a9066193646346bb62ee09b7bd4263dd533e984763d37fd040b955e79d8f883b1bd2b83a88c52738a93571c8b9e2166339debead4fe593490c164f18af958e6b7c5e7784dd578829ef5adb806f9bbfa439301bade17ba60af98ae1da47137b8683e6fee160ad8f0a6df5356f4eb79b1680beeacc4174d94a936cce2b6d5b446c23cd23", 0xb9}], 0x6, 0x2)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/213)
ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000140)={0xfffffffffffffff7, "62d3074847e3479e09cd56cb1cb3b07c0383a7671d6b3c1cf8d01cfcfca2c15f", 0x2, 0x1})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4)

03:56:39 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]})

[ 1619.253505][T20266] binder: release 25396:25412 transaction 327 out, still active
[ 1619.278334][T25414] binder: 25409:25414 ioctl c018620b 0 returned -14
03:56:39 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1619.316906][T20266] binder: send failed reply for transaction 327, target dead
[ 1619.355012][T20266] binder: release 25409:25421 transaction 331 out, still active
[ 1619.426139][T20266] binder: send failed reply for transaction 331, target dead
[ 1619.487161][T25427] binder: 25423:25427 transaction failed 29189/-22, size 24-8 line 2896
[ 1619.499400][T25427] binder: 25423:25427 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:40 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]})

03:56:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0)

03:56:40 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x44, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b489"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1619.791073][T25437] binder: 25431:25437 ioctl c018620b 0 returned -14
[ 1619.866629][    T5] binder: release 25431:25441 transaction 336 out, still active
[ 1619.886933][T20266] binder: send failed reply for transaction 336, target dead
[ 1619.908964][T20266] binder: send failed reply for transaction 339 to 25436:25442
03:56:40 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:40 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]})

03:56:40 executing program 0:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0)
r0 = gettid()
r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x40)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000140)=0x10)
syz_open_procfs(r0, &(0x7f0000000000)='schedstat\x00')
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

03:56:40 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:40 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1619.924216][T20266] binder: undelivered TRANSACTION_ERROR: 29189
03:56:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]})

[ 1620.016976][T25454] binder: 25448:25454 ioctl c018620b 0 returned -14
03:56:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1620.086474][T20266] binder: release 25446:25461 transaction 343 out, still active
[ 1620.095904][T25462] binder: BINDER_SET_CONTEXT_MGR already set
[ 1620.101912][T25462] binder: 25448:25462 ioctl 40046207 0 returned -16
03:56:40 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]})

[ 1620.156636][T20266] binder: send failed reply for transaction 343, target dead
[ 1620.183339][T25462] binder: 25448:25462 transaction failed 29189/-22, size 24-8 line 2896
[ 1620.191979][T20266] binder: send failed reply for transaction 346 to 25449:25463
03:56:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x101000, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={<r2=>0x0, 0x8}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r2, 0x401, 0x30}, 0xc)
r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x24)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x2, 0x9, "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", 0x1c, 0x8001, 0x6, 0x100000001, 0x75fe, 0x4, 0x3, 0x1}, r4}}, 0x120)

03:56:40 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1620.222385][T20266] binder: undelivered TRANSACTION_ERROR: 29189
[ 1620.247637][T25462] binder: 25448:25462 Release 1 refcount change on invalid ref 1 ret -22
[ 1620.257242][T25462] binder: 25448:25462 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:41 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:41 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

03:56:41 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40480, 0x0)
ioctl$void(r0, 0x5451)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xf4, 0x15, 0x400, 0x70bd2c, 0x25dfdbff, {0x1e}, [@nested={0xe0, 0xb, [@typed={0xc, 0x6f, @str='self\x00'}, @generic="9fc28e1a883b4d54c022143994e5f0f4568acc749b47404a5cb4ccc37be3f213e2b225d27dea3c332650e91ddd627647ea7b973f9a6d0aa13a582204760c879da0fa15cc8fe402c7814a4cf4154798df8fc12b86fcb76bd17c013c64f00c7d59f5df052d100443ba922f2ff1ca989cd368fb9b0fe1eeeee6260b5c6745d97ff124f3b3e5b1cfad277ac0b2184a385b73ebb5b8aee5d300f51346a3095c19829d96fc00e56d16e7fadf3bfe2b9546cb67e81ff5e04b17f6d82b9453e4dd5d375d662fc7420a765e0ca077ab5a5253"]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

03:56:41 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:41 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:41 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]})

03:56:41 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1620.957649][T25494] binder: 25487:25494 ioctl c018620b 0 returned -14
03:56:41 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000001, 0x400)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xc)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1621.040812][T25501] binder: BINDER_SET_CONTEXT_MGR already set
[ 1621.048277][T25501] binder: 25487:25501 ioctl 40046207 0 returned -16
[ 1621.061105][T25501] binder: 25487:25501 Release 1 refcount change on invalid ref 1 ret -22
[ 1621.112870][T20266] binder: release 25470:25482 transaction 351 out, still active
03:56:41 executing program 3:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
unlink(&(0x7f0000000900)='./file0/file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:41 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]})

03:56:41 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1621.159089][T20266] binder: send failed reply for transaction 351, target dead
[ 1621.194497][T20266] binder: send failed reply for transaction 354 to 25487:25501
03:56:41 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x46, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1621.238954][T20266] binder: undelivered TRANSACTION_ERROR: 29189
[ 1621.350138][T25521] binder: 25517:25521 ioctl c018620b 0 returned -14
[ 1621.413766][T20266] binder: release 25517:25523 transaction 358 out, still active
[ 1621.432858][T25524] binder: BINDER_SET_CONTEXT_MGR already set
[ 1621.439559][T25524] binder: 25513:25524 ioctl 40046207 0 returned -16
[ 1621.446413][    T5] binder: send failed reply for transaction 358, target dead
[ 1621.456449][    T5] binder: send failed reply for transaction 361 to 25516:25525
[ 1621.465652][T25524] binder: 25513:25524 transaction failed 29189/-22, size 24-8 line 2896
[ 1621.480016][    T5] binder: undelivered TRANSACTION_ERROR: 29189
[ 1621.498179][T25524] binder: 25513:25524 BC_INCREFS_DONE u0000000000000000 no match
[ 1621.509160][T25524] binder: 25513:25524 Release 1 refcount change on invalid ref 1 ret -22
[ 1621.519702][T25524] binder: 25513:25524 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:42 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:42 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})

03:56:42 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x5}, 0x1)

03:56:42 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:42 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:42 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]})

03:56:42 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x101000, 0x0)
pread64(r1, &(0x7f00000002c0)=""/122, 0x7a, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="0ad4598f3a23cdffb447dcaa5237ec5b4393cfa85ae63da00a963f08cbad52b9c6b4a295fd11390e7514e5f135f4868603fdd7744786c764bf27e1aad7856122fa9c658fa220317c89f6df57e49aa6f68b321fd857298fdb06da4b506d1528dca6767e31e505ba0ccb97828ece349c572b40e48cebcfe5e5d3617fc01a93", 0x7e}, {&(0x7f0000000140)="2426ba7ff6d124c408ef854bb0335f85f8128ef9c9d2978f3b2b94d9639f9c21ceb7755087b0abcebdc46aed42a199846c00a67be40ef609ab036e27e5694ff60c95f4e6963dc9e43c35ee8ea588c8135add06ac63b33b0c59505cda377f6feba3ad6ac112e6", 0x66}, {&(0x7f0000000000)="8e72602cd25bc1485d1a638b2986f7604d5518e57a7969d0f2f827a1420c396608de6349a8690754e680511d9c617bb75079f17a018645707e", 0xffffffffffffff4e}], 0x3)

03:56:42 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]})

[ 1621.845877][T25540] binder: 25532:25540 ioctl c018620b 0 returned -14
[ 1621.885776][T25542] binder: 25529:25542 transaction failed 29189/-22, size 24-8 line 2896
[ 1621.920067][T20266] binder: release 25532:25546 transaction 367 out, still active
[ 1621.929743][T25542] binder: 25529:25542 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1621.978034][T20266] binder: send failed reply for transaction 367, target dead
03:56:42 executing program 3 (fault-call:1 fault-nth:0):
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

03:56:42 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]})

03:56:42 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:42 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x88200)
r2 = socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r2})
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1622.171396][T25560] binder: 25556:25560 ioctl c018620b 0 returned -14
[ 1622.263016][T20266] binder: release 25556:25567 transaction 371 out, still active
[ 1622.284780][T20266] binder: send failed reply for transaction 371, target dead
03:56:42 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:42 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]})

03:56:42 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

03:56:42 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x47, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:43 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:43 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$sock_netdev_private(r1, 0x89f7, &(0x7f0000000080)="feecb63585de75027f080f886ad3f41d14086bb301645b74eac07aa5b5446543a5ef4e39c601fbb4c9138bec8064a94e52fc59b8f4ba1c05e8a492d7d8f9")
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x5, 0x3, 0x8, 0x5})

03:56:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]})

[ 1622.691221][T25577] binder: 25571:25577 ioctl c018620b 0 returned -14
03:56:43 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x4, 0x0)

03:56:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]})

03:56:43 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
getpeername$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10)

[ 1622.792513][T25585] binder: 25571:25585 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]})

03:56:43 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x1000000, 0x0)

03:56:43 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:43 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x800, 0x0)
getsockopt$inet_dccp_int(r0, 0x21, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000))
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgrou\xf0.htat\x00', 0x275a, 0x0)
write$P9_RAUTH(r0, &(0x7f0000000100)={0x14, 0x67, 0x1, {0x20, 0x0, 0x5}}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x1f, 0x1b, &(0x7f00000001c0)="aaeebc99ae01d65c0a9749148c56f0dd127be0838e8566387f4189d4450e1f", &(0x7f0000000200)=""/27, 0xfffffffffffffff9}, 0x28)

03:56:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]})

03:56:43 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

[ 1623.479201][    T5] binder: release 25571:25577 transaction 375 out, still active
[ 1623.496050][T20266] binder: send failed reply for transaction 375, target dead
[ 1623.544072][T20266] binder: send failed reply for transaction 378 to 25586:25596
[ 1623.551812][T20266] binder: undelivered TRANSACTION_ERROR: 29189
03:56:43 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:43 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x4000000, 0x0)

03:56:43 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]})

03:56:43 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./c\x88r \x00\xe4\xbf\xff\xff\xff\xffzyz1\x00', 0x200002, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@dev, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8)
r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x6c, r3, 0x700, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x31d0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffdee}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x8})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KDGETLED(0xffffffffffffff9c, 0x4b31, &(0x7f0000000040))

03:56:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})

[ 1623.642178][T25620] binder: 25617:25620 ioctl c018620b 0 returned -14
03:56:44 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x100000000000000, 0x0)

[ 1623.702193][T25620] binder: 25617:25620 transaction failed 29189/-22, size 24-8 line 2896
[ 1623.718861][T25620] binder: 25617:25620 Release 1 refcount change on invalid ref 1 ret -22
03:56:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]})

[ 1623.792910][T25628] binder: 25617:25628 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1623.808835][T25639] binder: 25627:25639 transaction failed 29189/-22, size 24-8 line 2896
03:56:44 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002500)='/dev/hwrng\x00', 0x4080, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000002540)={0x0, 'nr0\x00', 0x4}, 0x18)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

[ 1623.834943][T25639] binder: 25627:25639 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:44 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:44 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]})

03:56:44 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x400000000000000, 0x0)

[ 1624.429436][T25658] binder: 25653:25658 ioctl c018620b 0 returned -14
03:56:44 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:44 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./c\xe4\xf2\xc1\xc6\x8bg', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

03:56:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]})

03:56:44 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x4)

[ 1624.487084][T25663] binder: 25653:25663 transaction failed 29189/-22, size 24-8 line 2896
[ 1624.503849][T25663] binder: 25653:25663 Release 1 refcount change on invalid ref 1 ret -22
[ 1624.513315][T25663] binder: 25653:25663 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:44 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]})

03:56:44 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1000000)

03:56:44 executing program 0 (fault-call:1 fault-nth:0):
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]})

[ 1624.747902][T25681] binder: 25672:25681 transaction failed 29189/-22, size 24-8 line 2896
[ 1624.770566][T25685] FAULT_INJECTION: forcing a failure.
[ 1624.770566][T25685] name failslab, interval 1, probability 0, space 0, times 0
[ 1624.780706][T25681] binder: 25672:25681 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1624.795623][T25685] CPU: 0 PID: 25685 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1624.804676][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1624.804687][T25685] Call Trace:
[ 1624.804716][T25685]  dump_stack+0x1db/0x2d0
[ 1624.804747][T25685]  ? dump_stack_print_info.cold+0x20/0x20
[ 1624.804769][T25685]  ? find_held_lock+0x35/0x120
[ 1624.804810][T25685]  should_fail.cold+0xa/0x14
[ 1624.804840][T25685]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1624.804883][T25685]  ? ___might_sleep+0x1e7/0x310
[ 1624.828255][T25685]  ? arch_local_save_flags+0x50/0x50
[ 1624.828308][T25685]  ? __mutex_unlock_slowpath+0x195/0x870
[ 1624.828341][T25685]  __should_failslab+0x121/0x190
[ 1624.828367][T25685]  should_failslab+0x9/0x14
[ 1624.868646][T25685]  __kmalloc_track_caller+0x2d8/0x740
[ 1624.874030][T25685]  ? strncpy_from_user+0x4e0/0x4e0
[ 1624.879173][T25685]  ? digsig_verify.cold+0x32/0x32
[ 1624.884303][T25685]  ? strndup_user+0x77/0xd0
[ 1624.888847][T25685]  memdup_user+0x26/0xb0
[ 1624.893115][T25685]  strndup_user+0x77/0xd0
[ 1624.897461][T25685]  __x64_sys_add_key+0x19d/0x4f0
[ 1624.902407][T25685]  ? key_get_type_from_user.constprop.0+0x110/0x110
[ 1624.908996][T25685]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1624.915086][T25685]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1624.920892][T25685]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1624.926350][T25685]  do_syscall_64+0x1a3/0x800
[ 1624.930938][T25685]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1624.936563][T25685]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1624.942280][T25685]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1624.947932][T25685]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1624.953813][T25685] RIP: 0033:0x458099
[ 1624.957699][T25685] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1624.977305][T25685] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1624.985707][T25685] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1624.993668][T25685] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 00000000200001c0
[ 1625.001627][T25685] RBP: 000000000073bf00 R08: fffffffffffffffd R09: 0000000000000000
[ 1625.009600][T25685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
[ 1625.017565][T25685] R13: 00000000004bdff1 R14: 00000000004ce228 R15: 0000000000000004
03:56:45 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:45 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]})

03:56:45 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x4000000)

[ 1625.346119][T25701] binder: 25700:25701 ioctl c018620b 0 returned -14
[ 1625.400845][T25702] binder: 25700:25702 transaction failed 29189/-22, size 24-8 line 2896
[ 1625.409909][T25702] binder: 25700:25702 Release 1 refcount change on invalid ref 1 ret -22
[ 1625.419809][T25702] binder: 25700:25702 BC_ACQUIRE_DONE u0000000000000000 no match
03:56:45 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:45 executing program 0 (fault-call:1 fault-nth:1):
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

03:56:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]})

03:56:45 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x100000000000000)

03:56:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]})

[ 1625.538660][T25711] FAULT_INJECTION: forcing a failure.
[ 1625.538660][T25711] name failslab, interval 1, probability 0, space 0, times 0
[ 1625.581698][T25711] CPU: 0 PID: 25711 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1625.590800][T25711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1625.600870][T25711] Call Trace:
[ 1625.600900][T25711]  dump_stack+0x1db/0x2d0
[ 1625.600934][T25711]  ? dump_stack_print_info.cold+0x20/0x20
[ 1625.600988][T25711]  should_fail.cold+0xa/0x14
[ 1625.614853][T25711]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1625.614895][T25711]  ? ___might_sleep+0x1e7/0x310
[ 1625.614920][T25711]  ? arch_local_save_flags+0x50/0x50
[ 1625.615016][T25711]  ? map_id_up+0x19c/0x3e0
[ 1625.615062][T25711]  __should_failslab+0x121/0x190
[ 1625.630281][T25711]  should_failslab+0x9/0x14
[ 1625.630304][T25711]  kmem_cache_alloc+0x2be/0x710
[ 1625.630324][T25711]  ? from_kuid+0x85/0xc0
[ 1625.630344][T25711]  ? map_id_up+0x3e0/0x3e0
[ 1625.630378][T25711]  prepare_creds+0xa4/0x510
[ 1625.645099][T25711]  ? abort_creds+0x2c0/0x2c0
[ 1625.645120][T25711]  ? should_fail+0x250/0xd13
03:56:45 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x400000000000000)

03:56:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]})

03:56:45 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]})

[ 1625.645147][T25711]  ? install_process_keyring_to_cred.part.0+0x100/0x100
[ 1625.645167][T25711]  ? find_held_lock+0x35/0x120
[ 1625.667818][T25711]  join_session_keyring+0x19/0x340
[ 1625.667844][T25711]  lookup_user_key+0xf19/0x14f0
[ 1625.676991][T25711]  ? lock_release+0xc30/0xc40
[ 1625.677026][T25711]  ? join_session_keyring+0x340/0x340
[ 1625.677058][T25711]  ? key_validate+0x240/0x240
[ 1625.677093][T25711]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1625.677114][T25711]  ? _copy_from_user+0xdd/0x150
[ 1625.689225][T25719] binder: 25710:25719 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1625.693899][T25711]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1625.693922][T25711]  ? memdup_user+0x65/0xb0
[ 1625.693944][T25711]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1625.693974][T25711]  __x64_sys_add_key+0x272/0x4f0
[ 1625.694018][T25711]  ? key_get_type_from_user.constprop.0+0x110/0x110
[ 1625.694044][T25711]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1625.694066][T25711]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1625.694088][T25711]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1625.694122][T25711]  do_syscall_64+0x1a3/0x800
[ 1625.694146][T25711]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1625.694169][T25711]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1625.694202][T25711]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1625.694240][T25711]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1625.694256][T25711] RIP: 0033:0x458099
[ 1625.694273][T25711] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1625.694284][T25711] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1625.694302][T25711] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1625.694314][T25711] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 00000000200001c0
[ 1625.694326][T25711] RBP: 000000000073bf00 R08: fffffffffffffffd R09: 0000000000000000
[ 1625.694341][T25711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
[ 1625.724972][T25711] R13: 00000000004bdff1 R14: 00000000004ce228 R15: 0000000000000004
[ 1625.727635][T25715] binder: 25710:25715 transaction failed 29189/-22, size 24-8 line 2896
03:56:46 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2)

03:56:46 executing program 4:
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]})

03:56:46 executing program 0 (fault-call:1 fault-nth:2):
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)

[ 1626.181423][T25734] FAULT_INJECTION: forcing a failure.
[ 1626.181423][T25734] name failslab, interval 1, probability 0, space 0, times 0
[ 1626.209799][T25738] binder: 25737:25738 ioctl c018620b 0 returned -14
[ 1626.216603][T25734] CPU: 0 PID: 25734 Comm: syz-executor0 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1626.225638][T25734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1626.235708][T25734] Call Trace:
[ 1626.239019][T25734]  dump_stack+0x1db/0x2d0
[ 1626.243372][T25734]  ? dump_stack_print_info.cold+0x20/0x20
[ 1626.249101][T25734]  ? join_session_keyring+0x19/0x340
[ 1626.254388][T25734]  ? __x64_sys_add_key+0x272/0x4f0
[ 1626.259521][T25734]  should_fail.cold+0xa/0x14
[ 1626.264125][T25734]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1626.269969][T25734]  ? ___might_sleep+0x1e7/0x310
[ 1626.274846][T25734]  ? arch_local_save_flags+0x50/0x50
[ 1626.280148][T25734]  __should_failslab+0x121/0x190
[ 1626.285100][T25734]  should_failslab+0x9/0x14
[ 1626.289609][T25734]  __kmalloc+0x2dc/0x740
[ 1626.292011][T25739] binder: 25737:25739 Release 1 refcount change on invalid ref 1 ret -22
[ 1626.293853][T25734]  ? refcount_dec_and_mutex_lock+0x90/0x90
[ 1626.293873][T25734]  ? prepare_creds+0xa4/0x510
[ 1626.293894][T25734]  ? prepare_creds+0xa4/0x510
[ 1626.293920][T25734]  ? security_prepare_creds+0x123/0x190
[ 1626.293948][T25734]  security_prepare_creds+0x123/0x190
[ 1626.293978][T25734]  prepare_creds+0x3c4/0x510
[ 1626.309903][T25739] binder: 25737:25739 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1626.312833][T25734]  ? abort_creds+0x2c0/0x2c0
[ 1626.312854][T25734]  ? should_fail+0x250/0xd13
[ 1626.312884][T25734]  ? find_held_lock+0x35/0x120
[ 1626.312920][T25734]  join_session_keyring+0x19/0x340
[ 1626.312943][T25734]  lookup_user_key+0xf19/0x14f0
[ 1626.312964][T25734]  ? lock_release+0xc30/0xc40
[ 1626.369513][T25734]  ? join_session_keyring+0x340/0x340
[ 1626.374915][T25734]  ? key_validate+0x240/0x240
[ 1626.379693][T25734]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1626.385946][T25734]  ? _copy_from_user+0xdd/0x150
[ 1626.390811][T25734]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1626.397056][T25734]  ? memdup_user+0x65/0xb0
[ 1626.401481][T25734]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1626.407756][T25734]  __x64_sys_add_key+0x272/0x4f0
[ 1626.412734][T25734]  ? key_get_type_from_user.constprop.0+0x110/0x110
[ 1626.419340][T25734]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1626.425428][T25734]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1626.431247][T25734]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1626.437017][T25734]  do_syscall_64+0x1a3/0x800
[ 1626.441619][T25734]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1626.447254][T25734]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1626.452999][T25734]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1626.458583][T25734]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1626.464486][T25734] RIP: 0033:0x458099
03:56:46 executing program 1:
syz_open_dev$audion(0x0, 0x8, 0x100)
pipe(&(0x7f0000000300))
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0})

03:56:46 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x4000, 0x0)
lseek(r0, 0x0, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x100)
syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x0)

03:56:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]})

[ 1626.468392][T25734] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1626.488000][T25734] RSP: 002b:00007f4200a44c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1626.496424][T25734] RAX: ffffffffffffffda RBX: 00007f4200a44c90 RCX: 0000000000458099
[ 1626.504428][T25734] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 00000000200001c0
[ 1626.512410][T25734] RBP: 000000000073bf00 R08: fffffffffffffffd R09: 0000000000000000
[ 1626.520389][T25734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4200a456d4
03:56:46 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

[ 1626.520402][T25734] R13: 00000000004bdff1 R14: 00000000004ce228 R15: 0000000000000004
[ 1626.582791][    C0] ------------[ cut here ]------------
[ 1626.588557][    C0] AppArmor WARN cred_label: ((!blob)): 
[ 1626.588835][    C0] WARNING: CPU: 0 PID: 7831 at security/apparmor/include/cred.h:30 apparmor_cred_free+0x12f/0x1a0
[ 1626.594671][ T3866] kobject: 'loop5' (0000000047192872): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1626.604941][    C0] Kernel panic - not syncing: panic_on_warn set ...
[ 1626.604965][    C0] CPU: 0 PID: 7831 Comm: sshd Not tainted 5.0.0-rc2-next-20190117 #14
[ 1626.604974][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1626.604980][    C0] Call Trace:
[ 1626.604987][    C0]  <IRQ>
[ 1626.605008][    C0]  dump_stack+0x1db/0x2d0
[ 1626.605029][    C0]  ? dump_stack_print_info.cold+0x20/0x20
[ 1626.605054][    C0]  ? apparmor_cred_free+0x70/0x1a0
[ 1626.605072][    C0]  panic+0x2cb/0x65c
[ 1626.605088][    C0]  ? add_taint.cold+0x16/0x16
[ 1626.605106][    C0]  ? apparmor_cred_free+0x12f/0x1a0
[ 1626.605119][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1626.605137][    C0]  ? __probe_kernel_read+0x1f4/0x250
[ 1626.686667][    C0]  ? __warn.cold+0x5/0x48
[ 1626.691016][    C0]  ? __warn+0xe8/0x1d0
[ 1626.695099][    C0]  ? apparmor_cred_free+0x12f/0x1a0
[ 1626.696494][ T3866] kobject: 'loop3' (00000000cb8cde51): kobject_uevent_env
[ 1626.700298][    C0]  __warn.cold+0x20/0x48
[ 1626.700316][    C0]  ? apparmor_cred_free+0x12f/0x1a0
[ 1626.700336][    C0]  report_bug+0x263/0x2b0
[ 1626.700358][    C0]  do_error_trap+0x11b/0x200
[ 1626.700378][    C0]  do_invalid_op+0x37/0x50
[ 1626.700395][    C0]  ? apparmor_cred_free+0x12f/0x1a0
[ 1626.735394][    C0]  invalid_op+0x14/0x20
[ 1626.739562][    C0] RIP: 0010:apparmor_cred_free+0x12f/0x1a0
[ 1626.739620][ T3866] kobject: 'loop3' (00000000cb8cde51): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1626.745363][    C0] Code: 7c 88 48 c7 c7 80 d2 7c 88 e8 9d 69 f2 fd 0f 0b eb a9 e8 a4 40 29 fe 48 c7 c6 40 e2 7c 88 48 c7 c7 80 d2 7c 88 e8 81 69 f2 fd <0f> 0b 48 b8 00 00 00 00 00 fc ff df 80 38 00 75 4a 4c 8b 2c 25 00
[ 1626.745373][    C0] RSP: 0018:ffff8880ae6079f8 EFLAGS: 00010286
[ 1626.745385][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1626.745395][    C0] RDX: 0000000000000100 RSI: ffffffff81688726 RDI: 0000000000000006
[ 1626.745404][    C0] RBP: ffff8880ae607a18 R08: ffff88808fed0500 R09: 0000000000000000
[ 1626.745412][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808f6cac00
[ 1626.745418][    C0] R13: ffff88808f6cac00 R14: ffff88808f6cac88 R15: dffffc0000000000
[ 1626.745517][    C0]  ? vprintk_func+0x86/0x189
[ 1626.745537][    C0]  ? apparmor_cred_free+0x12f/0x1a0
[ 1626.745556][    C0]  security_cred_free+0x4b/0xf0
[ 1626.745576][    C0]  put_cred_rcu+0x21f/0x6e0
[ 1626.803739][ T3866] kobject: 'loop0' (00000000b138e880): kobject_uevent_env
[ 1626.805256][    C0]  ? get_task_cred+0x5e0/0x5e0
[ 1626.805274][    C0]  ? lock_release+0xc40/0xc40
[ 1626.805295][    C0]  ? file_free_rcu+0x98/0xe0
[ 1626.805314][    C0]  ? kmem_cache_free+0x225/0x260
[ 1626.805344][    C0]  rcu_core+0xc4a/0x1680
[ 1626.837213][ T3866] kobject: 'loop0' (00000000b138e880): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1626.840351][    C0]  ? rcu_fwd_progress_check+0xd0/0xd0
[ 1626.840385][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1626.840399][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1626.840415][    C0]  ? check_preemption_disabled+0x48/0x290
[ 1626.840437][    C0]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 1626.910401][ T3866] kobject: 'loop2' (000000006cf7cd86): kobject_uevent_env
[ 1626.910636][    C0]  ? rcu_pm_notify+0xd0/0xd0
[ 1626.922324][    C0]  __do_softirq+0x30b/0xb11
[ 1626.926848][    C0]  ? __irqentry_text_end+0x1f96d2/0x1f96d2
[ 1626.932756][    C0]  ? kvm_clock_read+0x18/0x30
[ 1626.937448][    C0]  ? kvm_sched_clock_read+0x9/0x20
[ 1626.942618][    C0]  ? sched_clock+0x2e/0x50
[ 1626.947043][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1626.953286][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1626.959537][    C0]  ? check_preemption_disabled+0x48/0x290
[ 1626.960351][ T3866] kobject: 'loop2' (000000006cf7cd86): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1626.965278][    C0]  irq_exit+0x180/0x1d0
[ 1626.965297][    C0]  smp_apic_timer_interrupt+0x1b7/0x760
[ 1626.965314][    C0]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1626.965332][    C0]  ? smp_call_function_single_interrupt+0x640/0x640
[ 1626.965346][    C0]  ? trace_hardirqs_off+0x310/0x310
[ 1626.965358][    C0]  ? task_prio+0x50/0x50
[ 1626.965373][    C0]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1626.965392][    C0]  ? check_preemption_disabled+0x48/0x290
[ 1626.965413][    C0]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1626.965435][    C0]  apic_timer_interrupt+0xf/0x20
[ 1626.965443][    C0]  </IRQ>
[ 1626.965459][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x95/0xe0
[ 1626.965473][    C0] Code: 48 c7 c0 f0 83 92 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 39 48 83 3d a2 60 9c 01 00 74 24 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 fc 22 62 f9 65 8b 05 65 ca 0b 78
[ 1626.965486][    C0] RSP: 0018:ffff8880a3a874a0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
[ 1627.066756][    C0] RAX: 1ffffffff132507e RBX: 0000000000000282 RCX: 0000000000000000
[ 1627.074746][    C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000282
[ 1627.081265][ T3866] kobject: 'loop4' (0000000051246e9a): kobject_uevent_env
[ 1627.082717][    C0] RBP: ffff8880a3a874b0 R08: ffff88808fed0500 R09: 0000000000000000
[ 1627.082728][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888090488640
[ 1627.082738][    C0] R13: ffff888090488640 R14: 0000000000000282 R15: ffff8880a3a87808
[ 1627.082780][    C0]  remove_wait_queue+0x198/0x300
[ 1627.082799][    C0]  ? add_wait_queue+0x300/0x300
[ 1627.082827][    C0]  poll_freewait+0xda/0x260
[ 1627.082841][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1627.082868][    C0]  do_select+0x10ad/0x1ab0
[ 1627.110458][ T3866] kobject: 'loop4' (0000000051246e9a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1627.114004][    C0]  ? select_estimate_accuracy+0x4e0/0x4e0
[ 1627.114041][    C0]  ? set_fd_set.part.0+0x70/0x70
[ 1627.114061][    C0]  ? set_fd_set.part.0+0x70/0x70
[ 1627.114080][    C0]  ? set_fd_set.part.0+0x70/0x70
[ 1627.114100][    C0]  ? set_fd_set.part.0+0x70/0x70
[ 1627.114125][    C0]  ? __might_fault+0x12b/0x1e0
[ 1627.114141][    C0]  ? find_held_lock+0x35/0x120
[ 1627.114161][    C0]  ? __might_fault+0x12b/0x1e0
[ 1627.181488][T25766] binder: 25764:25766 ioctl c018620b 0 returned -14
[ 1627.184148][    C0]  ? lock_acquire+0x1db/0x570
[ 1627.184171][    C0]  ? lock_downgrade+0xbe0/0xbe0
[ 1627.184187][    C0]  ? lock_release+0xc40/0xc40
[ 1627.184233][    C0]  core_sys_select+0x72a/0xb80
[ 1627.184247][    C0]  ? core_sys_select+0x72a/0xb80
[ 1627.184273][    C0]  ? do_compat_pselect+0x2d0/0x2d0
[ 1627.184286][    C0]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1627.184314][    C0]  ? kvm_clock_read+0x18/0x30
[ 1627.225529][ T3866] kobject: 'loop5' (0000000047192872): kobject_uevent_env
[ 1627.230364][    C0]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1627.230447][    C0]  ? ktime_get_ts64+0x38d/0x4f0
[ 1627.230469][    C0]  ? nsec_to_clock_t+0x30/0x30
[ 1627.258069][    C0]  ? poll_select_set_timeout+0x154/0x240
[ 1627.259460][ T3866] kobject: 'loop5' (0000000047192872): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1627.263714][    C0]  ? do_restart_poll+0x2e0/0x2e0
[ 1627.263737][    C0]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1627.263753][    C0]  ? _copy_from_user+0xdd/0x150
[ 1627.263775][    C0]  kern_select+0x1b4/0x250
[ 1627.263794][    C0]  ? core_sys_select+0xb80/0xb80
[ 1627.263807][    C0]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1627.263824][    C0]  ? trace_hardirqs_on+0xbd/0x310
[ 1627.263843][    C0]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1627.263857][    C0]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1627.263877][    C0]  __x64_sys_select+0xbe/0x150
[ 1627.263896][    C0]  do_syscall_64+0x1a3/0x800
[ 1627.263921][    C0]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1627.336469][    C0]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1627.342207][    C0]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1627.342744][T25776] binder: 25764:25776 Release 1 refcount change on invalid ref 1 ret -22
[ 1627.347769][    C0]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1627.347784][    C0] RIP: 0033:0x7f96657cadd3
[ 1627.347800][    C0] Code: 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 83 3d 25 48 2b 00 00 75 13 49 89 ca b8 17 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 ab 2f 01 00 48 89 04 24
[ 1627.347808][    C0] RSP: 002b:00007ffd24b809b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[ 1627.347822][    C0] RAX: ffffffffffffffda RBX: 00007ffd24b80a40 RCX: 00007f96657cadd3
[ 1627.347837][    C0] RDX: 000055ddcabc9af0 RSI: 000055ddcabc9b10 RDI: 000000000000000c
[ 1627.379784][T25777] binder: 25754:25777 transaction failed 29189/-22, size 24-8 line 2896
[ 1627.386112][    C0] RBP: 000055ddc9d9f8dc R08: 00007ffd24b809e0 R09: 0101010101010101
[ 1627.386122][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd24b80a48
[ 1627.386131][    C0] R13: 0000000000000000 R14: 00007ffd24b80a38 R15: 00007ffd24b80a3c
[ 1627.387574][    C0] Kernel Offset: disabled
[ 1627.448325][    C0] Rebooting in 86400 seconds..